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FOREWORD 

In one respect, the classification of this FOREWORD and of the 
accompanying papers is a rather remarkable anomaly and one that may 
be of interest. I shall begin the story bv noting that when cor- 
rectly used, the currently employed ! n. s- cryptographic- 

ally, almost an exact replica of a system developed over 30 years 
ago by the American Telephone and Telegraph Company, for the U. S. 
Army in World War I. A rather detailed description of the system 
and its apparatus was disclosed by the American Telephone and 
Telegraph Company in a technical paper which was written by the 
principal Inventor, an A. T. & T. Co. engineer named Vernam, and 
which he presented before the midwinter convention of the American 
Institute of Electrical Engineers at New York City In February 
1926. The_Vernam paper was later printed in the proceedings of the 
Institute. 1 It 3ee «3 almos t a certainty that the cryptographic 
principles on which | is based stem directly from that paper. 

Our records show that the A. T. & T. Co. development was 
Initiated in 1916, but was perfected too late to have been employed 
extensively for U. S. Army traffic In World War I. A set of four 
intercommunicating stations was established in the autumn of 1918, 
primarily fpr test purposes in the United States, 2 and a limited 
amount of actual traffic was handled in this system as a preliminary 
to possible wider usage by the U. S. Army, both in the United States 
and in Europe in 1918. In the spring of 1919* upon the close of 
World War I and for a number of reasons, one of which will soon be 
made clear, the system was abandoned. Some 22 years later, in the 
face of a real need for secure teletypewriter communications and 
while awaiting the completion of new equipment specially designed 
for the purpose, I suggested that the old "double -tape system" be 
resuscitated by the Signal Corps as an emergency means of teletype- 
writer crypto-communication. The A. T. & T. Co. was very helpful 
in this and the emergency system was successfully used from the 
middle of 1942 until early in 1943, when it was replaced by better 
ones using more modern equipment. 



♦ ♦♦a*** 



It was the contention of all concerned in the original A. T. & T. 

Co. development in World War I — the engineers of the company and j 

those of the Signal Corps, as well as the cryptanalysts In the r 

Military Intelligence Division, General Staff, in Washington — that 
the system and apparatus as developed and proposed for use was , 

"absolutely indecipherable without the keys." Indeed, the Director 
of the Military Intelligence Division went on record officially to 
that effect and a copy of the letter, which was actually prepared 
by Xardley (author of "The American Black Chamber"), is still avail- 
able in our files. 

^Vernam, G. S., Cipher Printing Telegraph Systems for Secret Wire 
and Radio Telegraphic Communications, Trans. A.I.E.E., Vol. 45, 
pp. 109-15, 1926. (Vernam Is the man whose name gave rise to the 
rule which we now call "Vernam addition.") 

2 A document dated 23 Sept. 1918 entitled "Regulations for the Test 

of the Printing Telegraph Cipher" is still extant. I 

\ 
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Of possible Interest to the reader are the circumstances under 
which the apparatus and the system were explained to me In New 
York, in the early part of May 1918, as I was about to embark for 
war service in the Code and Cipher Solution Section of G-2, GHQ-AEF, 
in Prance. From the summer of 1915 until May 1918, I had been a 
member of the staff of an institution known as the Riverbank Labora- 
tories at Geneva, Illinois, a private research organization operated 
by a somewhat eccentric but wealthy Chicagoan named Colonel George 
Fabyan. 1 One of the fields in which research was conducted at the 
Riverbank Laboratories by a small staff was that of cryptography, a 
subject in which I took an interest as an avocation. But soon it 
became my vocation, when in the latter part of 1916 Colonel Fabyan 
made me Director of the Department of Ciphers in addition to certain 
other duties. From then until about the middle of 1918, in a quasi - 
official relationship with, and at no expense whatever to, the 
Government (Colonel Fabyan, as a patriotic citizen, footed all the 
bills), the Department of Ciphers conducted cryptanalytic work for 
the State, War, Navy, and Justice Departments. None of these 
large organizations had any cryptanalytic units whatever until the 
Army established a unit (under Yardley) in the latter part of 1917* 
It was on the basis of this earlier quasi -official relationship 
that a disclosure of the details of the A. T. & T. cipher machine 
and its operation was made to Colonel Fabyan and to me in May 1918, 
as noted. (Security considerations were just in their infancy!) 

As explained to us by the officials of the A. T. & T. Co., 
the cryptographic system they proposed was based upon the use of 
two Baudot random-key tapes n \ 

I I one ek&dtl y luuu, sne other, exactly yyy cnaracters in 

length; both were to be changed daily. Single tapes were never to 
be used — always both tapes were to be employed simultaneously, in 
combination, to generate by their interaction a single very. long 
key of 999 ,000 characters. 



I heard nothing more about this machine until April 1919 » 
when I was demobilized and rejoined the staff at the Riverbank 
Laboratories, to resume my position as head of the Department of 
Ciphers — with no other duties. The A. T. & T. cipher was then 
being carefully scrutinized by my staff. 



Having had a good opportunity to study the system, the conten- 
tion of invulnerability to decipherment without the key (the word 
cryptanalysis had not as yet been coined) was deemed to be unwar- 
ranted by the cryptanalytic staff at Riverbank. After noting the 
results of their theoretical studies and elaborating the results 
further, I became the principal contestant of the alleged invul- 
nerability of the system. For this and for other reasons, I was 
directed by Colonel Fabyan to put the results of our studies on 
paper and thereupon wrote a brief brochure entitled “Methods for 
the Solution of the A. T. & T. Cipher Machine. 1 * The paper was 
prepared in March 1919 but no copy was sent to Washington at that 



^■Courtesy title (an honorary colonel on the staff of the Governor 
of Illinois). H© died in 1935* 

2 The Department of Justice had one roving agent, on the Southern 
border, who from time to time solved some simple Mexican Ciphers, 
mostly monoalphabetic in nature. . 
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time. Instead, Colonel Fabyan began writing letters to certain 
people and made what appeared to them to be some rather broad 
claims. 

In August 1919, after a considerable amount of correspondence 
which was becoming rather acrimonious (largely because Colonel 
Fabyan, purposely or inadvertently, wrapped a veil of obscurity 
around what he thought ve were able to do), the then Director of 
Military Intelligence, Brigadier General Marlborough Churchill, 
sent Major Yardley to River bank to look into the claims which 
Fabyan was making as to the vulnerability of the system. The prin- 
ciples we had elaborated to solve this cipher were explained to 
Yardley, who returned a few days later, accompanied by Lieut. Colonel 
Mauborgne, the Signal Corps cryptographic expert who had been 
directly In charge of the development and who, 20 years later, was 
to become Chief Signal Officer. The proposed solution was explained 
to both officers, but Colonel Mauborgne contended that Rlverbank 
really did not know the Signal Corps' method of use. Although it 
was true that permanently fixed lengths of key tapes (1000 and 999) 
had been contemplated in the original method as proposed by the 
A. T. & T. Co., Colonel Mauborgne stated that the Signal Corps had 
different ideas: the two key tapes, he said, could be variable in 
their lengths, prime numbers being preferable; and there were other \ 
new procedures in their usage which would Invalidate the solution 
proposed by the Riverbank Investigators. The record contains the 
following: "Colonel Mauborgne left with us a rough pencil sketch 
of the manner in which the machine is now used, reiterating his 

opinion that as now used, the cipher is Invulnerable. Colonel 

Mauborgne said further that if we could break the cipher when used 
in accordance with these rules he would then acknowledge that we 
had broken the cipher as used by the Signal Corps." 

A day or two after the departure of these officers, two copies 
of my paper of March 1919 were sent to Washington, one for the 
Signal Corps, the other for G-2. The conference also resulted in 
an agreement that Riverbank would accept the gauntlet thrown down 
by the Government and would try to prove Its contention of vul- 
nerability of the cryptographic system by solving a set of "challenge 
messages. 

The Riverbank cipher staff studied the new situation presented • 
by the change in procedures adopted by the Signal Corps and found 
It unnecessary to change Its original position regarding the 
vulnerability of the system. Again I was asked to put the results 
of our studies down on paper, and wrote an addendum to the original 
paper (Addendum No. l), which is dated 19 August 1919* The 
Riverbank staff then awaited with confidence (not unmixed, however, 
with some trepidation) the receipt of a promised ,set of 150 cipher - j 
tapes representing the "challenge messages." These were to consist 
of messages sent In one day's traffic among four simulated stations j 
forming a simulated net. f j 

\ • , , ; I 

Unfortunately, when the cipher tapes arrived, on 27 September 
1919, there were found among the "challenge" cipher tapes four 
plain-text tapes, the latter having been inadvertently included. 

Rather than accept this "bust" and becloud the issue further, we 
immediately notified the authorities in Washington of the error and , 
on 8 October 1919 received a new batch of cipher tapes. 1 This time 

•^1 must admit, however, that we nevertheless derived considerable 
benefit from the "bust," for I.t told us much about the construc- 
tion of the messages — the nature of the addresses, signatures, 
etc. It will be seen later how useful this knowledge became in j 

solution. I do not think we could have met the challenge success- 
fully had it not been for this error! 







- 3 - 




no plain-text tapes were among the challenge messages and the River- 
bank staff began its work. The labor vas somevhat arduous and after 
some six weeks* steady work, often 12 hours a day, my collaborators 
had all deserted me, when all our efforts seemed fruitless and the 
problem a hopeless one. However, with what appears to me today as 
rather dogged determination (how I yearn for those days of youth.'), 

I stuck to the task all alone. Finally, on 8 December, exactly two 
months after receipt of the "good" challenge messages, I, too, came 
to what seemed the end of the trail — mentally "down but not out." 

Reviewing the situation quietly, with my feet on top of my desk 
and pulling at my pipe (yes, I smoked one in those days.*), I came to 
two conclusions: first, the principles of solution were correct and 
had to yield the results we were seeking; second, somebody had made 
an error somewhere in the work and the error had to be found before 
further progress could be made. What we had received from Washington 
were perforated tapes and these had to be transcribed into characters 
on sheets of paper. Could it be that one of my assistants or I had 
made an error in this first step? There were three crucial messages 
involved — they had been the raw material for endless experiment— and 
I decided to check the transcription from the tapes myself. Wo 
sooner thought of than I proceeded to the task. 

My ruminations were quickly rewarded when I discovered that 
one character had indeed been omitted accidentally in transcribing 
one of the three tapes — but that character was at a very crucial 
point. Making the necessary correction, I called my staff together, 
explained the situation, and asked for volunteers to tackle the 
problem once more. There was 100 # response (all six of them!), 
although I could easily detect that my staff remained cynical but 
had decided to humor me in my fatal delusion. However, it was no 
delusion, and I, myself, was the lucky one to dispel it. For within 
ten minutes and with mounting internal excitement (some of my readers 
will recognize the symptoms) I had obtained, as a resultant of the 
trial of two hypothetical addresses, the letters EQU. Wot much, to 
be sure — we had often before obtained excellent trigraphs, tetra- 
graph3, and even pentagraphs that turned out to be discouraging 
accidents. But I continued, thinking to myself: "If the next 
letter turns out to be a vowel, preferably an I or an A, maybe I 
really have something here!" The letter that turned up was the 
/ letter I--EQUI! Hardly able to repress my excitement, I went on: ; 

"In the name of all the patron saints of the Kingdom of Cipher, let ■ 
the next letter be the letter P," I prayed. And a P it was! "I've 
got it!" I shouted, "I really have, this time." It was a bit dif- | 

ficult to convince my collaborators and echoes of disbelief rever- 
berated. But soon, gathered about in a tight huddle, a convincing 
demonstration, consisting of adding a few "good" letters immediately 
before and after EQUIP, left nothing more to be desired— except the 
reconstruction of the key tapes. The challenge had been success- 
fully met, but it had taken much longer than had been anticipated. - 

The two unknown key tapes were reconstructed coincidentally * 

with the solution of a few of the challenge messages and then, to 
prove beyond shadow of doubt that the system had been solved, we 
enciphered three messages of our own, addressed to certain officials 
in Washington, using the reconstructed keys. Our messages were 
enciphered "by hand," for we did not have any of the machines. The 
Telephone Company In Chicago kindly gave me access to a keyboard j 

perforator, by means of which, very laboriously (by the "hunt and 
pec3^ method) , I punched out the cipher tapes. The latter were then 
sent by mail to Colonel Mauborgne in Washington, where, promptly on 

^Because of the transcribing error mentioned above. But not all the j 
time lost on that account was sheer waste, for it was during the 
period of fruitless struggle that all the short cuts were developed j 
which greatly hastened solution once the error had been found. j 



- 4 - 




receipt, they were deciphered by machine with his own key tapes. 
Colonel Mauborgne immediately thereupon and without reservations 



acknowledged, as promised, that the validity of the River bank con- 
tention bad thus been fully proved. 1 Soon Colonel Mauborgne and 
Major Y&rdley visited us once more, to learn the details. The suc- 
cessful outcome of this experiment naturally called for another 
addendum to the original paper, and this became Addendum Bo. 2. 

By this time the cryptanalytic staff of the Military Intelli- 
gence Division, finding Itself in a rather embarrassing position 
and insisting that the initial point of departure in the Rlverb&nk 
solution was a knowledge of the starting points of the two key tapes 
for each message (how true.’ ), proposed that these initial points be 
disguised by means of a specially prepared small code and then 
enciphering the code groups by three Independent mixed alphabets. 

The proposed method (but not the code or the special alphabets) was 
submitted to the River bank staff for comment, and I wrote a third 
addendum to my original paper (Addendum No. 3), proving the inade- 
quacy of the proposed method of disguising the indicators. Two 
copies of Addenda Bos. 1, 2, and 3 were now sent to Washington. By 
this time the war was receding into the dim past, the Army author- 
ities were tired or somewhat groggy over the whole business, and 
thought it best to call a halt to It. As a consequence, further 
work on the A. T. & T. Co. Cipher Machine was stopped and the ~j 

machines put In storage. Soon thereafter I left Rlverb&nk to accept , 
the position which was established for me in the Office of the Chief 
Signal Officer in Washington, as the chief (and only) cryptanalyst. 

I did a little research, when tine permitted, on Improvements in the 
printing telegraph cipher and proposed one which was soon made , 

public by the issue of a patent. (How naive we were in those days; j 

God forbid that the lummy a ment disclosed in this patent be adopted 
and incorporated in f) . j 
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In view of the present situation in regard to the ays- 

tern, it occurred to me that the River bank technical p&tmra -on- 1 the 
A. T. & T. Cipher Machine, even though they were written many years 
ago, might still be of some value or would, at least, be of histor- 
ical interest. A search through the old files at Arlington Hall 
yielded a copy of the basic paper, Addendum 1, and Addendum 3, but 
alas.* a very thorough search of all files in Washington failed to 
turn up a copy of Addendum 2. A letter to the Rlverbank Laboratories 
brought nothing. Colonel Fabyan had long ago departed to the next 
world, as had his secretary. The De&prtment of Ciphers had ceased 
functioning soon after my departure and all its files had been 
destroyed. So there was no Addendum 2 to be had, which was unf or tun- 
ate, because it was perhaps the most interesting one of them all: 
it was the one which dealt in detail with the solution of the chal- 
lenge messages. The only material I could find among my old and ' 
very dusty personal papers was a badly marked up first draft of 
Addendum Bo. 2, with many diagrams missing but with considerable , 

number of miscellaneous sheets of notes, queer "doodllngs, " etc. I ! 

^ j 

■‘"Following is quoted from a letter dated 29 Dec. 1919 from Colonel 
Mauborgne to Colonel Fabyan: "You have done a great work and your 
contention of last March is sustained - that the method of using 
the printing telegraph cipher as used last year by the Signal 
Corps was decipherable. This Is, perhaps, the toughest indivi- 
dual cipher you have etfer had to tackle. To the victor belong 
the spoils.* ” 
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do not know whether it was worth the effort, but I have done my 
best to reconstruct Addendum 2, within the limited time at my dis- 
posal. It is not adequate, and I am sure that the final Addendum 
2, when it left Riverbank, was a very much better paper. H owever . 
it is my hope that some of our workers and collaborators on \ 
may find in these papers some tiny fragments of interest. For me> 
they are an echo of interesting events of a distant age; but the 
thrill of a successful meeting of a serious challenge is still 
vivid in memory. 1 

I have made no changes whatever in the texts of the basic 
paper, or in Addendum No. 1 and Addendum No. 3* Because of the 
unfortunate failure to find Addendum No. 2, I have had to use, as 
noted above, the first 'draft. This, too, I have faithfully repro- 
duced without changes of a material nature. The papers should 
therefore be read, not in the light of the present state of crypt- 
analytic science, but in the light of the art as it was In 1919 — 
a long time ago, when considered In terms of the progress that has 
been made since then. 



In the light of these resuscitated papers of long ago, one 
fact takes on a special significance: the present usage of a system 
over 30 years old points to a lack of sophistication or imagination 
in cryptographic invention. This lack receives confirmation when 
we take into consideration other things that we know, and I feel 

juld not be too pessimistic about the future. Currently, 
roblem is. In certain respects, much more difficult 




than tae one whic h confronted the Riverbank staff In 19 19. \ 

\ / than were those Involved in 

the Riverbank solution; but more Important by far is this difference: 
there are I 



because In the 



latter ne ither key tape was ever used by itself, only in combina- 
tion. andf 



it is frequently the case that the 



); this is something which would have greatly 

— L i ^ . j. j _ j 4 j. ^ j _ _ 1 j j 



assisted in the Riverbank solution — in fact, it would have elimi- 
nated most of the problem. 



Finally, there Is one more aspect well worth noting and of 
current interest. 



The Riverbank staff solved what was for those days, I think, 
a very complex problem, and it accomplished the task under cir- 
cumstances which, considered In the light of what can be done 
cryptanalytically today, were rather difficult. 

In the first place, the staff was very small in numbers and, 
with one exception, its members had relatively little training In 
theory and very little practical experience in "operations " as 



^As of possible interest to my readers who may care to look Into 
it, there is on file a paper entitled: "Extracts from corres- 
pondence relating to solution of A. T. & T. Printing Telegraph 
Cipher," together with certain letters which explain why the 
Extracts were prepared. They give further details of the story 
and its background. 
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conducted In 
tools were re 



these days. In the second place, its procedures and 
slatively weak and undeveloped, for modern methods and 
techniques were just in their infancy. In the third place, it had 
only one set of messages on which Its contention of vulnerability 
had to stand or fall. And if it had failed on that single set, it 
would have completely fallen down on the job it had undertaken — 
for no other set of messages, I feel sure, would have been made 
available to permit another trial to be made. In the fourth place, 
and possibly of greatest import, the River bank staff solved the 
problem without the aid of machinery of any kind whatever. 



Of course 
"hand" aids to 



, ve were always on the lookout for "short cuts" and 
speed up the cryptanalytic testing. I do not think 
we suffered from lack of imagination, but the machine age in crypt- 
analysis had not yet dawned. Tabulating machinery was just in its 
infancy; Its use as an aid in cryptanalysis was not even conceived. 



But the Riverbank staff, small as it was, without adequate 
training and experience, lacking special machinery, using what nay 
today seem rudimentary methods, and having only a single, relatively 
small sample to begin with, nevertheless successfully met the 
challenge offered by the Signal Corps and G~2. Today, with the aid 
of high-speed electrical and electronic devices, with much advanced 
cryptanalytic theory, methods, and techniques, with an adequate 
staff of enthusiastic, competent researchers, and a plurality of 
sources from wh ich examp les to be worked upon can be selected, it 
seems to me t.ha l I should not be a hopeless problem. While 

the odds against our present workers may be greater than they were 
against the Riverbank workers, the tools and methods of the former 
are very much better than those of the latter; and over and beyond 
these considerations there is this one: the urgency. Importance, 
and possible fruits of a successful meeting of the 1948 challenge 
are so much greater than those of the 1919 challenge that no com- 
parison whatever can be made In these respects. Just as the 
Riverbank workers met the challenge p resented to them in 1919, with 
far less at stake, so I feel sure our I \ workers will success- 

fully meet the far more difficult but much more Important challenge 
offered them in 1948. 






m. 



21 July 1948 



WILLIAM P. FRIEDMAN 
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PRINCIPLES WED IN THE SOLUTION OF THE A. T. ft T. 

mackhc cipher. 

la Jbne, 1918, there ms etfcadtted ftr our axaminafcicn by the 
A. T. A T. Qaapany, and t ho of flea of the Chief Slgpal Offiosr of the 
Obited States Arty* details end «c— plee of the work of a cipher machine 
to be teed in tmiaaitting secret official eanmuaieaticne. After oonsld- 
arable ctutfcr — hare for — d the opinion that the eye tan possess— eertain 
wsataMseea which pern it of an attack upon the either and render it unsafe 
for natters of importance . 

We Shall try to show first that the slightest carelessness on the 
part of any individual entrusted with the actual work of enciphering wLLL 
lay all tbs messages enciphered by means of the same keys open to easy sol- 
ution . Since carelessness an the part of the personnel to be entrusted with 
the operation of the machine and ignorance on their pert of the reaeons for 
every precaution races saiy in cipher work are to be eopected, the existence 
of this opening ibr an attack oust bo admitted. Secondly, we shall attempt 
to d low, granting not only an absolutely infallible operation of the machine 
by the personnel, but also the theoretioal absolute indecipher ability of a 
mss eare enciphered fay means of a random-mixed, single, non-repeating, running 
key, that the mechanics of the machine, and certain features of the system, 
are such that an attack is not only practicable, but easy under normal con- 
ditions . 

It will be unnecessary to gp into details of the operation of the 
machine , inasmuch as this report is addressed only to those who submitted it 
for examination, 

\fe shall discuss the solution of two cases: 

(1) V/bere messages have been enciphered incorrectly, 
two or more being in the s ante key a, 

(2) There messages have been enciphered correctly, 
none being in the same ktyB, 
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1. SOIUTION OF A CASK WHERE TI70 MESSAGES HAVE BEEN 
ENCIPHERED SI THE SAME KEYS. 

Let us suppose that in the two messages given below the first 
has been enciphered by the keys indicated and that, through an oversight 
or carelessness, the second message was then enciphered by the sane keys, 
beginning at exactly the same point in each key. The result of each an 
error ie that both messages have bem enciphered by the ease single key, 
and we may disregard for the present the fact that a double key was used* 
Tie give the details of the solution of such a case, not because there is 
anything original or seemingly impossible contained therein, but because 
certain phases of the principles elucidated will be used lefcer in the dis- 
cussion of a more complicated case* 

MESSAGES. 

X.EITPP QPJUT Q 4 R H V M X H U 0 X 6 R D P 

TN3RP V70CG 3NRXQ YGGTE IFORT 

TYQIH JBPS5 DFJ5B KWMAX C G X 3 U 

ELHIO P I J N X LEE VII OISCR XIE etc. 

etc.etc. C E L 2 W C 3 S K C 

2. EITPP QPJMY Q P SR B S J E 7 H F M 4 P 3 

MNOAD FVGCM JXECI X3I7P K3GJI 

TDWIT7 S E 7 E 2 K Z 2 P 6 SHI25 F 1 W Y 3 

UQHAM WL.DHT G E 5 G C DVMJT X L Q etc. 

etc, etc. 4HZUF C R3 LX J P 6 3 Q UQ 

We may disregard the first seven letters in both messages, 
since they deal with the key indicators, The next four letters, J,M,Y,Q, 
being co moon to both messages, probably represent 443$, (functions of 
machine: carriage return, line feed, letters), Vfe may begin working, 
therefore, from that point on, as shown below, putting the messages di- 
rectly beneath each other. 
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Mess.l « 4 n v. v n X M 0 X 6 N d p I n 3 R f V 7 G c 0 3 R R x 0 X 0 0 

2 ( 688,2 - > R R B S J E 7 H P M 4 P 3 M N 0 A U F V a C U J X B C I X 3 I 

Mas Sol - T El F 0 P. T T T C I H J 9 P S 5 B f J J B K 51 W A X C 8 X 3 D 

* Voss .2 - 7 P K 3 G J I T D V/ I 17 S B 7 E 2 K Z 2 P 6 S H I 2 5 F t ff X 3 

Meesol - F. LHXUFXJHXLKKW. UOXSCRXIE etc, ate. GEL 2 
Mesa o 2 » U Q H /l !f L D f! T G E 5 G G D TKJ T X n ate. etc. 4 H Z U 

Mess U 1 - '? C 3 S K C 

Mess .-,2 - 7GR3LZJP63QUQ 

Mow in all messages nay expect to find both a series of 3*e 
(spaces) arid 44 2 (carriage return and line feed) , repeated irregularly at 
intervals throughout the messages. If v« can locate in one of the messages 
a aeries of 3’s or the combination 442, or any other plain text, then we may 
find what the plain text of the corresponding portion of the other message is. 
The oomplate symmetry of the cipher square, giving rise to reciprocal rela- 
tions between the three elements, key, plain text and cipher, in a manner to 
be explained below, makes it possible to recover the single key, given the 
cipher am the plain text. This is the first weakness in the dpher system* 

In this example, we may start off ty assuming that the plain text 
of one of the messages consists of nothing but a e«*lee of 3*a, and then 
find out what the plain text of the other message would be on this assump- 
tion, fay referring to the cipher square; that is, by finding the single key 
letters concerned for the tentatively deciphered portions and applying them 
to the corresponding portions in the other message „ For example, the first 
cipher letters in the two massages as arranged for decipherment are 4 and P. 

If we assume that the plain text equivalent of 4 is 3, then the key letter 
would be N, in which case the plain text equivalent of P would be G. If, 
on the other hand, we assume that the plain text equivalent of P is 3, then 
the ksy letter vould be L, in which case the plain text equivalent of 4 would 
be G also, But the result of assuming the key letter to be 3* applying it to 
4, which gives N, and then applying N to P, is also G; and the result of as- 
suming the key letter to be 3» applying it to P„ which gives L, and then ap- 
plying I to 4, is also Go These relations, as stated above, hold true be- 
cause of the complete reciprocity of the cipher square. It is dear there- 
fore, that we can omit, for the present, the intermediate step of determining 
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tha key letters, and find simply the plain text of the other message 
directly from the square, by considering only the three elements! assumed 
plain text, cipher of message 1, and cipher of message 2* This oan be done 
in one operation by proceeding down the oolunns headed, fbr exa mp l e by 4 and 
P, in the cipher square, until me come to 3 in one of the columns, where- 
upon it will be found that G is in the other column on the sans line as 3, 
or we can proceed down the oolunns headed by 4 and 3 to P in one of the col- 
umns, whereupon G will be found to be opposite P in the other column on the 
same line. Ary three letters may be chosen to find the fourth in like man- 
ner, since the four elements, 4, P, 3 and G, exhibit couplets reciprocity . It 
will be noted that the letters 4, P, 3 and G appear at the four corners of a 
rectangle in the cipher square, and that there are six times 32, or 192 such 
rectangles in this square, at the corners of which the letters 4, P, 3 and G 
will appear. See Fig. 1. / 

FIG. 1. CIPHER SQUARE 

ABCDEFGHIJKLMN0PQRSTUVTTXYZ234567 
A7GFR2CBQS4NZ5K6IHDIW3XTVPLE0JM0A 
BG7QTOHAF5LPJSIEKCW1IDV0R3H46XZI2B 
CFQ70KAH04SEUL2P0B3JVDTXW65HRIZrC 
DRTU743WXK2I6TSZ5VARBCQGH1IOJFEPLD 
E20K47R6TURC1TXFBQPJ3ZI5LMHTASD7GE 
FCHA3»7QBJI25ZEr6G04XRWVT0MKDSLPF 
QBAHTT6Q7CMZT4IP2NPT5RX3DUKJOVI.SEO 
HQFGXTBC7L56I40H2AVZ3WRDDESPTMJKH 
IS54KUJM17FDHGRVT7, NAPB0I6TTQ32CBXI 
J4LS2RIZ5F73BQUWXHEC6HY0PVGDKAHTJ 
KNPEIC2Y6D37XWAQB0SR54ZMLGVFJUTHK 
LZJM6W541HBX7CVR3SOQ2YNEKUATPGFDL 
M5SLYXZ I4GQWC7T 3RJPBN 62KEDFV0HAUM 
WKY2SFEPORUAVT7HG6IDMJL5ZBXC43WQH 
O6EPZBY2N73QR3H7CKLX45IJSFDGHT0AO 
P T K 0 5 (J 6 B 2 T X B 3 R 0 C 7 E H !J I Z 4 s J A D H L V D F P 
QHCBVPGFAZWOSJ6KE7XLDTD3R21YW54NQ 
RD73AJUTVNBS0PILKX7KGFHBQ564C2YZR 
SIMJN345ZACRQBDXWLK7T26POTHUEPGVS 
T77DVBZXR3P652NM4IUOY7QCAFSELHOKJT 
U3VDCIRXWEN4Y6J5ZTF2Q7BHGLPSAK0MU 
VXUTQ5W3ROYZN2LI4DH6CB7FAJKMGPESV 
WTRXGLVDUY0HEK5 J S 3 B P AHF 7C X 2 Z Q 6 N 4 W 
XV3WHMTUD 6PLXEZS JRQ 0FGAC74N 5BY2IX 
YPN6MH0KE17 7GUDBFA25TSLJI473QZXRCY 
ZL450THJS QGVAFXDU I 6 H E P K 21 3 7HYBCR Z 
2B6NJAK0P3DFTVCGHY4ULSHZ5QH7IRXB2 
30XRFSDVT2KJP04MLWCEHAGQBZY17N653 
4JZIEDSLMCAUGH3TV52F0KP6YXBRN7QW4 
5 MIZPVLSJ BHTF A. 73 4 Y G K OE N 2 R C X 6 Q 7 3 5 

602YLGPEKXTHDDQAFNZVJHS41CRB5W376 
7ABCDEFGHIJKLMNOPQRSTUVWXYZ234567 
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Applying this process of assisting one of the messages to consist 
exclusively of 3 ff s# the plain text of the other message ia shown in Fig* 2, 
on the line labeled ’’Equivalertbs of 3» n 

FIG* 2* 

Message 1- 48MTIXKH0X6IDPI*3RFF70C03»8X 

Message 2 ~ PRRBS JE 7 H F li 4 P 3 MB OH F TO C M J X S C 

Equivalents of 3-G 7 L A XL B 0 4 H A ? ?P P 3 0 F CQG 3 3 2 JIBQ 

Message 1- QYGGTEIFORTTYGIHJBPS5PFJ5BKW 

Message 2~ 1X3 1 7 F X 3 0 J X TD fflffS 8 7R2 XZ 2P 68 H 

Equivalents of >■ YHQOH V/ F F I S k 3 0 F 3 A R M X 7 B 2 0T771 A 

Message 1- MAXCGX3UELHYUFYJNXLKKWUOYSCR 

Message 2~ 125FLWY3BQHAMWLDMTGE5GGDVMJT 

Equivalents of 3~ V S I 3 N R Y 3 2 E 3 L 5 E A I H b NR H P F fK X E V 

Message 1- X I S etc. etc* 

Message 2- XL Q etc* etc. 

Equivalents of 3- 3 T L 



Note the underlined portions of what is apparently excel Je nt plain 

text. The first one spoils out 3CF, which suggests 3GF3. Twenty-two letters 

beyond that we find 30*3 ABU, v&ich suggests 30F3ARMYS* Five letters beyond 

that, we find CFFIC, which suggests 3CFFICE3, or 3GFFICER(8)3, or 30FFICIAL3* 

These plain text portions may or may not belong to the same message, since 

we cannot tell yet to which message any tentatively deciphered portion belongs* 

let us now try a series of 442*8 in place of a series of 3*8 • In 

otter words, we may assume that one message consists exclusively of a series 

of 442*8, and see what the plain text would be for the other message. We nay 

start by assuming 442 to occur at the beginning of one message, and see what 

it gives for the corresponding place in message 2, thus: 

Message 1 - 4 R M 
Message 2 - P R R 
Assumed plain text - 4 4 2 
Equivalents of 442 - P 4 H 

Since F4H does not constitute any part of a plain text word, we 

try the sequence 442 one space to the right. Thus: 

Message 1-4RMV 
Message 2 - P R R B 
Assumed plain text - 4 4 2 

Equivalents of 442 - 4 V S 
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This cojrioi nation, 4VS, is likewise no part of a plain text 



word, so we try the sequence 442, one, two, three • • . • • spaces to 
the right, taking note of ell the good combinations which result in 
the other message, Ron, a short cut to this prooesa is to fill out 
on one line the equivalents of 4; on a line below, the equivalents of 2; 
then the first two members of any set of the three equivalents of 44 2 will 
be found by taking two sequent letters on the first of the two lines of 
equivalents, and the third member of the set of three equivalents will be 
found directly to the right of these two letters on the lower line* 

Thus: 

Message 1-4HM7HI (P4H 

Message 2-PRR35J Equivalents of 442 ( 4 V S 

Equivalents of 4- P 4 V K 2 V in succession: ( V K 6 

Equivalents of 2- H S 6 H ( K Z H 

( etc. 

Applying this process throughout both messages, we have what is 
shown in Fig. 3, which includes the equivalents of 3, since we may as well 
combine the results of both experiments into one figure to see if we can 
piece together such portions of the tentative decipherment as may be given. 

FIB. 3» 

Message 1-4RMV1IXM1IOX6NDPYH3RFV7GCG3RRX 
Message 2-PRRBSJE7HFM4F3MN0APFVGCHJXBC 




Equivalents of 3 - 3 T I* 
Equivalents of 4 - 4 II? 
Equivalents cf 2 - 2 P H 
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Immsdiately preceding SGF3ARM (the result of a series of seven 

3's) wo hears l> and before that ERA (the result of 442). Noting that the L 

can be joined to tho ERA and then to the 3CF3ARK, we have the following: 

Plain text of one message -ORPSA 4233333333AK 
Plain text of other message -3GENERAL30F3ARMI4 

Immediately following the place where ARM occurs, we have the 

fallowing: 

Plain text of one me a sage -NY30FFIC 

Plain text of other message - 442 33333 

We can Join these two portions, and assuming that CRPS is a part 

of the name 3SIGNAL3C0RP5, we have: 

Plain text of one message -35 IGNAL3&0RPS 442333 
Plain text of other message -3ADJUTANT3&ENERAX30 

Plain text of one message -33333ANY30FFIC 
Plain text of other message -F3ARMI44233333 

With this amount of intelligible text to build upon,, it is not a 
difficult ratter for the cryptographer to complete tho decipherment of these 
two messages, applying the principles elucidated above, with this modifica- 
tion: that continuation of text in one message results in continuation of 
text in the other, without a recourse to the assumption of a series of 3*s 
or 442's. 

To recover the key we have but to take the plain text of either 

massage, and one of the cipher messages and refer to the cipher square. Were 

the tvro messages exactly the sane in length, it would, be impossible to tell 

whether the cipher message labeled 1 above applies to the plain text message 

beginning TO ALL OFF ICHiS , or to the other messa^D In this case, however, 

the messages are not the same length. The endings are as follows: 

1 C E L 2 W C 3 S K C 

2, 4HZUFCR3LXJP63QUQ 

The decipherment up to the portion where the two me s sagas no 

longer overlap is as follows: 
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1 CEL2T/C3SKC 

2 4HZUFCR3LXJP63QPQ 

OPFICER6M5 

V0CATE3GEN 

It ie evident that the second message ends . .... V0CATE3 
GENERAL 3* and tvs can non attach each cipher to the proper plain tenet. 
Cipher message 1 begins TO AIL. OFFICERS ; cipher message 2, COL J B 
EMERSON. 



The conpleted work appears as shown in Fig. 4* The solution 
of such a case present no great difficulties to the decipherer, although 
the process may be rather slow. 

FIG. 4. 



Single key — AHQ40L0XCK03YZX24MT 

Plain text of one message— 44 25T03ALL30FF ICE R S 
Plain text of other message- 4425COL3J 3B3EMERSQ8 

Cipher EITPPQP «J XI I Q 4 OTM X MM 0 X <5 N DP X 

Cipher EYTPPQPJMYQPRRBSJE7HFM4P3M 

Single key - t MD DC H 6 B 5 2 P I V S Z H 2G Q AS U H I Z 7 2 

Plain text - 30F3THE3S foN Al 3 C 6 R P S 4 42 3 3 3 3 § 

Plain text - 333CARE 3ADJ0TANT 3GENERAL30F 3 
Cipher - --N3RFV7QC03KRXQYGGTEIF0RTTYGI 
Cipher NOAUFVGCMJXECIX3I7PK3GJITDWI 

Single key - TKXYPRFYIL5BLPIB4PBHW7PZWXQP 
Plain text - 3 3 3 A N Y 3 0 F F I C E R 3 3 1 N 3 * HE 3 S X 6 H A 

Plain text - AR1IY44233333 I T 3 IS 3REQ0ESTED3 

Cipher - -- HJBPS 5 D F J 5 B K H K A X C G X 3 U E L H I DP I 

Cipher WSE7E2KZ 2P 6 S H I 2 5 F L If Y 3 DQ H A KD1 

Single key - B 4 DR S B P A Z H 7 U 6 R 6 . . etc. .... P H 5 

Plain text - £3 CO R P S 3 D E S I R I N G . . etc OFF 

Plain text - THAT3INF0RMATI0N . . etc V 0 C 

Cipher JNUXKlfUOYS CRXIE . . etc CEL 

Cipher DMT GE 5 D C D YH JT XL Q . , etc 4 H Z 

Single key - 3XKC7DZRM0PN 64 

Plain text *. ICER6H5 

Plain text - ATE3GENERAL6M5 

Cipher 2WC3SKC 

Cipher D F C R 3 L X J P 6 3 Q D Q 
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2. SOUJTICTJ OF A CASE GIVEN FIVE MESSAGES CORRECTLY 



ENCIPHERED* NONE BEING IN THE SAME SETS . 

It is clear that if one key is 1,000 letters in length end the 
other 999, the resultant single key could not begin to repeat itself until 

999.000 letters have been enciphered. This fact obviously precludes the | 

possibility of an attack upon the sane principles as explained in the pre- 
ceding section, since overlapping messages would very rerely, if ever, occur 

except as the .result of errors, flhile it is true that the resultant single 
key is a non-repeating, random-mixed key, yet the fact that this single toy _ 
results Aron two keys which remain constant, though shifting with regularity, 
permits an attack to be made upon the System. 

It is clear that if a message begin® with the keyB 0C8.-001, after 

1.000 letters have been enciphered, the Ion gar toy will have made one com- 
plete revolution, and the shorter key id 11 have made one complete revolution 
plus one letter, resulting in bringing back the longer toy to 001 and the 

shorter key to 002. These two revolutions constitute what we shall term & -j 

cycle, and in this instance, the first cycle will have been completed. After 

2.000 letters, the longer toy will have mads exactly two complete revolutions, 
the shorter one will have made two letters more than two complete revolutions, 
resulting in bringing the longer toy back to (XXL, end the shorter key to 003* 

This would be the end of the second cycle. These relations existing between 
the two toys and the cycles are illustrated graphically in Fig. 5 , in which 
sequent cycles are superimposed. 

FEo 5. 

Cycle 1. Longer toy - BQZV3PNV60RK etc. . . V X Ifi 

Shorter toy - NVACXQ5RTSBQ etc. . . R K N 

Cycle 2. Longer toy - BQZV3PNV60RK etc. . . V X II 

Shorter key - V A C X Q 5 R T S B Q etc . . R K N V 

Cycle 3. Longer key - BQZV3PNV60RK etc. . . V X M 

Shorter key - ACXQ5RTSBQ etc . . RKVNA 

Cycle 4. Longer toy - BQZV 3 PNV 6 ORK etc. . . V X II 

Shorter key - CXQ5RTSBQ etc. . . R K V N A C 

etc. etc. etc. etc. 
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Yte shall talcs as tha measure of a complete cycle the longer toy. 

Note that we may regard the longer toy as stationary, and merely shift the 
short a 1 toy one letter to the left after each cycle has bean completed. 

The basis of the attack on this case consists in (1) determining 
and superimposing sequent cycles; (2) assuming the presence of such characters 
as 442 and 33333, which cannot be eliminated and still have the machine func- 
tion properly j and (3) recovering the keys step by step simultaneously with 
decipherment « 

In order to simplify the explanation of this case we shall show 
first hew the double keys are recovered and tested as to correctness, using 
a certain amount of cipher text with its corresponding plain text, disregard- 
ing for the present the question of how the latter is obtained. Vfo shall as- 
sume that the portions of text given below belong to the sane section of three 
sequent cycles, and that ws have the plain text far the first two cycles. 

FIG. 6. 

Cipher - GN 0 Q R X 5 etc. 

Plain -4425A6M etc. Cycle 1. 

Cipher - 2S4WPWN etc. 

Plain - 6M5PNLE etc. Cards 2. 

Cipher - SE4TKI4 etc. 

Plain - etc. Cycle 3. 

How the successive steps in the recovery of the dbuble toy are 
illustrated graphically in Fig. 7, and the subsequent discussion will refer 
to the various sections of this figure. Ife do not know what the combination 
of letters in the longer and the shorter key is which produces cipher letter 
G from plain text 4 as the first cipher le tter in cycle 1, and cipher 2 from 
plain text 6 as the first cipher letter in cycle 2. EUt we may ass use in 
cycle 1 that the first letter in the longer kqjr is A, in which case the cor- 
responding letter on the shorter key must be 2, as shown in (l) of Fig. 7} 
in cycle 2, remembering that the longer toy remains stationary, and that 
the shorter one shifts one space to the left after each cycle, if tho first 
letter in tha longer key is A, then the corresponding letter in the shorter 
key, to produce cipher 2 from plain text 6, must be G, as shown in (2) of 
Fig. 7o 
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Nor? sines the shorter key has shifted one letter to the left in 
cycle 2, the letter G can be pLaced next to Z on the shorter key in cycle 
1, See (3) of Fig. 7» If the letter in the second position on the shorter 
key in cycle 1 is G, in order to produce cipher N from plain tenet 4, the 
corresponding letter in the same cycle on the longer key must be V. See (4) 
of Fig, 7o '"fe may now place V next to A on the longer key in cycle 2. See 
(5) of Fig. 7. 

In order to produce cipher letter S from plain text M in conjunction 
with V as the letter in the longer toy, the second letter on the shorter key in 
cycle 2 must be U. See (6) of Fig. 7. Vfc may now place U next to G on the 
shorter key in cycle 1, as shown in (7) of Fig. 7, and find the corresponding 
letter on the longer key. It is 2 0 See (8) of Fig. 7» 

The process set forth is continued, resulting finally in the re- 
construction of a double key \hich will produce from the cipher letters given 
in both cycles the correct corresponding plain text. Thus: 

Longer key -AV2X7MV 
Shorter key - Z G P Y D G X 

Cycle 1. Cipher G N P Q R X *> 

Plain text -4425A6M 

Longer key - A V 2 X-7 M V 
Shorter key - G U Y 0 G X W 

Qycle 2. Cipher 2 S 4 VI P W N 

Plain text - 6 M 5 P N L E 

We may test the correctness of these keys by applying than to 
cycle 3. Thus : 

Longer key -AV2X7MV 
Shorter key - U Y D G X W 

Qycle 3 Cipher S E 4 Y K I 

Plain text - ERAL.LT 

% see here the ending of a word like GENERALLY and we may feel 
sure of our keys* 

Now in the reconstruction of our keys above, we began arbitrarily 
with A as the first letter in the longer tey. life might have begun with any 
other one of the 32 possible letters of which the cipher square is composed, 
and thus bu i ld up another pair of keys which, though in external appearance 
al the gather different from the pair recovered above, would serve Just as well 
as the latter. 3h short, it is possible to derive 32 different pairs of keys. 
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any pair of vhich might be the original pair, but since all pairs give 
equivalent results, it vd.ll be unnecessary to find out which pair was 
really the origins! . 

In the preceding example, the decipherment of superimposed 
portions of cycles 1 and 2 was given, it haviig been stated that we should 
disregard for the moment the nuestlon of how this decipherment was procured. 
Vh shall now proceed to the next step, which is to decipher and reconstruct 
the keys simultaneously, given no decipherment whatever to start with. For 
this cnee we shall show the steps in the actual solution of a problem where 
only five messages have been intercepted. Since the principles to be eluci- 
dated require but a small part of a larger boc^r of text, it will not be nec- 
essary to give the whole of each of these five messages. VJb shall show first 
merely the key indicators and the length of each message. 

KEY INDICATORS AND LEKJTH OF V£S SAGES . 

1. 060-050. Length, 610 letters. 

2. 670-660. Length, 555 letters. 

3. 225-216. Length, 482 letters. 

4. 707-698. Length, 884 letters. 

5 . 591-583. Length, 572 letters. 

Assuning keys of 1,000 and 999 letters , we may indicate graph- 
ically the relative positions in which these messages will fall by a diagram 
such as that Bhown in Fig. 8. In this diagram ve show exactly where each 
me saage begins and ends, what the key indicators are, etc. V«e can take for 
experiment any vertical section of these superimposed cycles. Let us take 
the section consisting cf 25 letters in each of messages 1, 2, 4 and 5 as 
indicated by the serrated lines in Fig. 8, This diagram shows that letter® 

1 to 25 of message 1, 391 to 416 of message 2, 354 to 379 of message 4 and 
470 to 495 of message 5 fall within this section. ’% therefore take those 
letters from our messages. They are as follows: 

Message 1. Letters 1-25. 

5Y27C 3RNK6 R72QA J4UX6 CJOAJ 



J 
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Message 2. Letters 3 91-416 o 
5JBQB G3L77 D75VZ BT7IR 50BRG 

Message 4° Letters 3 54-379 o 
XCHLT JQJUH TCA5C3 tfWMBF ST7UI 

Message 5« Letters 470^495* 

CXURW K3Z2T F70N2 GVRNP 26NTR 

Let us place these four portions directly beneath one another . 



Thus: 



FIG. 9. 



Cycle 1 - 5 I 2 7 C 
tyflle 2-5 JBOB 
Qjrde 3-ICHLT 
Cycle 4 - CXURW 



3RHK 6 R72QA 
03177 D7SVZ 
JQJUH W A 5 C 3 
K 3 Z 2 I P 7 0 N 7 



J4UI6 CJOAJ 
BTVIR 50BRG 
WWMBF S T 7 U I 
GVRNP 26NTR 



Now if we can find the plain text for the series of letters 



which fhll directly beneath one another in cycles 1 and 2 we can begin 



to reconstruct the keys. It become a question therefore of assuming 



the plain text for the first few letters of <yles 1 and 2, recovering 
thB keys upon the basis of such tentative decipherment and then testing 



them upon cycles 3 and 4» If the tentative decipherment is correct, the 
application of the double key to cycles 3 and 4 must result in the pro- 
duction of intelligible text. If such a result is not attained then it 
means that the tentative decipherment upon which the recovered double key 
is based is not correct, and we proceed to iry a different tentative de- 
cipherment for cycles 1 and 2. The incorrect assumption can involve ei- 
thareor both of the series of tentatively deciphered letters. Obviously, 
if we can be certain of the decipherment of one of the series vie will be 



on surer ground end will have to modify our assumption only for the other 
of the series when our trials of recovered keys prove the tentative de- 
cipherment to be incorrect. Now the beginning of nearly every message 
can be assumed to be 4425, in order to insure a proper adjustment of the 
receiving machine. Let us begin therefore by assuming that our message 
1 starts with 4425 > and since the portion of this message tfiich falls 
within the section to be analyzed contains letters 1 to 25 , we may insert 
tentatively the decipherment of the first four letters of message 1 as 



4425 • Then let us assume for the moment that the portion directly beneath 
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in me s saga 2 consists of a series of 3*s* reconstruct the keys for these 
two portions (as illustrated in Fig. 7) end test them on cycles 3 and 4« 
The result of these steps is shorn in Fig. 10. 

FIG. 10 

longer key - A S R 4 

Shorter key - H OR ft 

Cycle 1. Cipher - 5I27C3RN etc. 

Assumed plain text -4 4 2 5 

longer key - A S R 4 

Shorter key - 0 R Q H 

Cycle 2. Cipher - $ B 0 B G 3 L etc. 

Assumed plain text - 3 3 3 3 

Longer key - A S R 4 

Shorter tey - R Q H 

Qyde 3 Cipher -XCHLTJQJ etc. 

Resultant plain text-H V R 

longer key - A S R 4 

Shorter key - Q H 

Cycle 4. Cipher - CXURtfK3Z etc. 

Resultant plain teoct-G N 

These results prove that the assumption of a series of 3*s for 
the beginning of cycle 2 is incorrect, since the letters given for cycles 
3 and 4 form unintelligible text. Vie therefore try out another probable 
coofcination for message 2, such as RE 3, retaining as our decipherment of 
the corresponding portion of massage 1 the combination 4425* and see what 
result this gives. A list of the polygraphs which would recur most fre- 
quently* and vhich would be tested in conjunction with 4425 for message 
1* is given in the following table: 



33333 


30F3T 


IN3T 


3WTP 


3THE3 


ATI 


\lh-S,R 


D3TH 


3 AND 3 


HAT 3 


vm 


S31N 


IN03 


EST3 


IT-3,H 


S3TH 


ERE3 


HE(3)S 


T3TH 


TER (3) 


3THA 


TI0N3 


3ARE3 


HE(3)A 


3JT3 


E3TH 


N3TH 


6M53 


HE(3)R(3) 


HIS 3 
3®3 


3ALL3 


6N53 



The successive trials take vary little time, since the correct- 
ness of any trial is speedily proved or disproved by applying the resultant 
keys to cycles 3 aad 4« la this case, the trial of the polygraph 3CN3 re- 
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suits in excellent combinations in cycles 3 and 4» Thus: 

FIG. 11. 

Longer ley - AS PM 
Shorter iey - H 0 P A 

Cycle lo Cipher -5Y27C3RR etc. 

An aimed plain text - 4 4 2 5 

Longer ley - AS PM 
Shorter key - 0 P A V 

Cycle 2a Cipher - 5JBOBG31 etc. 

Assumed plain text ■» 3 0 N 3 

Longer key - AS P M 

Shorter key ° P A 7 

Cycle 3° Cipher - X~C H L T J Q J etc. 

Resultant plain text - 4 4 2 

Longer key - AS PM 

Shorter key - A 7 

Cycle 4« Cipher - CXURWK3Z etc. 

Resultant plain text. -CO 

It is evident that in cycle 3 we have struck a "carriage return 
and line feed;" in cycle 4# we probably have a word beginning with CO, and 
we can try to build upon this digraph such words as suggest themselves, as 



the following; 



CODE 

COLUMN 

COLLECT 

COME 

COMING 



COMMAND 

COMPANY 

COHDITICU 

CONNECT 

CONSIDER 



CONTRACT 

CONVOY 

COPY 

CORRECT 

COST 



etc. etc. 



It may take considerable time to test out all of the words 

rhich suggest themselves, but it is only the start *hich is laborious, 

for after this the messages almost solve themselves. Let us see what 

( P 

happens when we try C0II1AHD. Given ( ? in cycle 4* the blank letter is 

( U 
( M 

F* This enables us to place F beneath M in the lower key in cycle 3* and 

(a 

gives A as the pLaln text letter. Given (? in cycle 4, the blank letter is R. 

(R 

(M 

Tfrth these additional lower key letters 5n place throughout 
our deci her meat we have the following: 
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FIG a 22 

longer key ~ A S P II 
Shorter toy - H 0 P A 7 F R 
Cycle 1» Cipher - 5 ? 2 7 C 3 H H etc<> 

Assumed plain text - 4 4 2 5 

longer key - AS PH 
Shorter key - 0 P A 7 F R 

Cycle 2 0 Cipher -5JBOBG3L etc. 

Assumed plain text 3 OK 3 

Longer key - AS PM 
Shorter key - P A 7 F R 

Cycle 3 Cipher - XCHLTJQJ etc* 

Resultant plain text - 4 4 2 A 

Longer key - AS P H 
Shorter key - A 7 F R 

Cycle 4 Cipher - CXURHK3Z etc 0 

Resultant plain text - C 0M1IAND 

We are novi ready to determine the next letter in the longer key„ In 

(? 

the column headed by the letter to be sought, in cycle 1 we have (7 $ in 

(? (? (C 

cycle 2, (F ; in cycle 3* (R * (7 

(B (T 

(7 (7 

It is evident that we want such a letter in the upper key as will produce the 
beet plain text letters from the given cipher letters to add to the already 



deciphered text, 



could try out all the letters of the alphabet in turn. 



beginning with A, thus: 

If A is the ) (A (A (A 

upper tey let- ) in cycle 1,(7 = F; in cycle 2, (F = Qj in cycle 3,(R ss B 
tar then ) (C (B (T 

If B is the ) (B (B (B 

upper key let- ) in cycle 1,(7 * Q; in cycle 2, (F a F; in cycle 3*(R =* A 
ter then ) (C (B (T 

If C is the ) (C (C (C 

upper key let- ) in cycle 1,(7 «* 7; in cycle 2, (F »Gj in cycle 3 (R «* H 
ter then ) (C (C (T 

etc a etc, etc. 

A short cut to the finding of these successive equivalents is 

ac complished by the use of the alphabets of the cipher square cut apart and 
mounted upon strips^ It will be noticed that the successive equivalents for 



the combination 



l in 



cycle 1 are F, Q, 7, 



; for the combination 3 



in cycle 2, Q, F, G, 



0 | for the combination T in cycle 3, B, A, H, 



Now note the alphabets in the cipher square headed ty the intersec- 

7 F R 

tion letters of the combinations q >3 viz., C, H, and G, respect ively o 



In the C alphabet the sequence begins F, Q, 7, 



It is evident that this 



alphabet will give the couplets sequence of letters resulting from the application 
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of tho succe salve letters of the alphabet to the combination c * The H 

alphabet will likewise give the oosytimte sequence of letters resulting from the 

F 

application of the successive letters of the alphabet to the conbination BJ 
and the 0 alphabet will give those applying to y* Therefore, if we taka the 
alphabets of the cipher square, cut them apart, mount them on strips, select 
those headed by the letters C, H, and 0, end set them so that the letters of 
all three coincide throu^iout their length, we have the complete series of 
letters resulting from the application of the successive letters of the alphabet 
to these combinations. The successive letters or equivalents of this operation 
will all be found on the same horizontal lines. By setting the 7 alphabet oppo- 
site our stripe, the letter in the longer key necessary to produce the equiva- 
lents which fall an the seme line will be indicated on the 7 alphabet at the 
same tins, as shown in Pig. 13, 

PIG. 13, If the high frequency letters appear in red on these stripe. 



B Q P A 
C 7 Q H 
D 0 X TT 
E I 76 
F A B Q 

G H C 7 
HO 7 C 
I 41 X 
J S 5 Z 
t £ 6 I 
IMZ4 
K 1 4 I 
H 2 0 P 
0 P H 2 
P 0 2 H 
Q B.A F 
R 3 7 T 
S J Z 7 
T 7 3 R 
D D W X 
7 T R 3 



XW DO 
T 6 E K 
Z 5 S J 

2 H P 0 

3 R T 7 

4 I ML 

5 Z J S 

6 7 X E 



ws can begin by selecting that horizontal line which contains all 
red letters. In this cass, with 7 as the letter in the longer key 
far the column under discussion, the three high frequency letters, 
T, R, and 3 arm given. These, added to our partial decipherment , 
give the Allowing* 

FIG, 14 

longer key - A S P If 7 

Shorter key - H 0 P A 7 F R 

Cycle 1 Cipher - 5T27C3RH etc, 

PLain tact - 44 2 5 T 

longer key - AS PM7 

Shorter key - 0 P A 7 F R 

Cycle 2, Cipher - 5 JBOBO 3 L etc. 

Plain text - 3 0 N 3 R 

longer key - AS P HV 

Shorter toy - P A 7 F R 

Cycle 3 . Cipher - XCHL7JQJ etc. 

Plain text - 4 4 2 A 3 

longer key - A S P M 7 

Shorter key - A 7 F R C 

Cycle 4* Cipher - CXURWK3Z etc. 

Plain text - COMMAND 
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In cycle 4 wo have (W which gives C as the corresponding let- 

(A 

ter in the shorter key# as shewn already in Pig. 14. We may try ait in 
cyde 2 the letter E after H. This would give Z as the letter in the longer 
toy fbr that column. Applying Z to all the corbinations in this column, wb 



have the following: 



FIB. 15 



longer key -AS P M V Z 

Shorter key - H0PA7FRC 

Cycle 1. Cipher - rTTTcTT¥ etc. 

Plain text - 4 4 2 5 T 0 

Longer key - A S P M V Z 
Shorter toy - 0 P A 7 F R C 

Cycle 2. Cipher - 5 J 3 0 B'cf J L etc. 

Plain text - 3 0 N 3 R E 

Longer key - AS P M7 Z 

Short a* key - PA7FRC 

Cycle 3. Cipher -XCHLTJQJ etc. 

Plain text - 4 4 2 A 3 H 

Longer key - AS PH V Z 
Shorter hay - A 7 F R C L 
Cyde 4. Cipher CXURWK3Z etc. 

Plain text COMMAND 

The first message begins with TO, and we may place a 3 after it. 

This gives the letter in the longer key which applies to that column# viz.# 3 
and this. In turn# gives the {lain text letter C following E in cycle 2 # making 
it probable that the word is RECEIPT or RECEIVING or RECORD etc. Thus: 

FIB. 16. 

longer key -ASPMVZ3 
Shorter ley - H0PA7FRC 
Cycle 1. Cipher -5T27C3RR etc. 

Plain text - 4425703 

Longer key - ASPMVZ3 

Shorter key - 0PA7FRC 

Cycle 2. Cipher - 5 JB0BG3L etc. 

Plain text .-30N3REC 

Longa* ley - ASPMVZ3 
Shorter key - P A 7 F R C 
Cycle 3. Cipter XCHLTJQJ etc. 

Plain text 4 4 2 A 3 H 

Longer toey-ASPHVZ3 
Shorter key - A 7 F R C 

Cycle 4. Cipher - CXURWK3Z etc. 

Plain text - COMMAND 
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From the conciliation (? in cycle k, L Is given as the let tar in tha 

(K 

(N (3 

shorter key, which, in turn, in cycle 3* in (L , gives the plain text letter E, 

(Q 

(? 

suggesting the word HEAVY* rfe can test out the words which suggest than- 
selves in cycles 2 and 3, and see what we get in cycles 1 and 4; or we can 
test out the words which suggest themselves in one cycle by applying the 
resultant key letters to any other cycle at the proper point* 

Enough of the procedure has been shown to prove that the method 
is perfectly practicable. If 4425 tried out at the beginning of the message 
does not yield good results, there are many other places to try out the same 
combination further along; for this combination, 442, must appear at inter- 
vals of approximately 55 to 70 letters* Or, this failing, the aids of messa- 
ges can be tested for 615, i. e*, "period*" Should the decipherer be fortunate 
enough to find two messages which begin within cue or two letters of one 
another in sequent cycles, then it will be unnecessary to assteae any plain 
text other than 4425* &>, if he should find that the beginning of one message 

falls within the seme section as the end of another, the plain text will be 
442? and 61(5° When a place is reached where the proper continuation of the 
messages is difficult by reason of the failure of the preceding text to sug- 
gest the succeeding text, recourse is had again to the alphabet strips* 

It is to be noted further that these alphabet strips may bo used 
to find the letters in the shorter key as well as those in the longer key* 

The arrangement of the messages into sequent cycles is such that the letters 
of the shorter key are similar on diagonal lines* Given the letters of the 
longer key and the cipher on a diagonal line, cne proceeds to set the strips, 
applying the same principles as before, remembering only to add the high 
frequency combinations found diagonally on the strips in the messages as 
arranged for decipherment* The letter opposite the high frequency com- 
bination on the 7 alphabet, will be the diagonally constarh letter of the 
shorter key* 

The complete decipherment together with the double key for these 

partial messages is shown in Fig* 17° 
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FIG. 17 . 

-ASPM7Z3E1C70JMALIRBG03HT/FD 

- H 0 P A 7 P R C L D P E K Z T U H P A 3 U F 7 A 

- 5 t 2 7 C 3 R » K 6 R 7 2 Q A J 4 C X J 0 A J 
-4425T03ALL3RESER7E30PFICE 

-A8PH7Z 3EK70JH A L IRBGU 3 H 17 F D 

- 0PA7FRCLDPEKZTTJMPA3ULF7AV 
-5 JBOBS3L77D7S 7 ZBT V I R 5 0 B R” 

- 3 0 K 3RECEIPT 3 0 F 3 A N 30RDER3? 

-ASPK733BK70JNALIRBOU3H37FD 
- PA7FRCLDPEKZTUMPA30LF7AVC 

- X C H L T J $ J U H W A 5 t~3 W T ,7 M B F S T 7 UT 
-442A3HE AVT3BARR AGE30B3THE 

-ASPM7Z 3EK70JNALIRBGU3H WFD 

- A7FRCLPPBKZTPMPA3ULF7AVC2 

Cipher - C X UR W K 3 2 2 IF 7 0 N 2 G V R N P 2.6 N T R 

Plain text -COi!liANDIKG36T?ffl5TH3MINET7E 



We have seen that the knowledge of the length of the key was 
necessary in order to arrange the messages in the preceding case for de- 
cipherment. Granting that the lengths of the tapes bearing the keys would 
be changed from day to day, and that "breaks" between messages would be made, 
it would nevertheless be an easy matter for the enery to superimpose cycles 
correctly, without a knowledge of these lengths or these "breaks", since 
the key indicators which must accompany each message afford ample data 
for the placement of messages. For instance in the preceding case we can 
determine the cycles to which each message belongs relative to the first 
message, merely by finding the difference between the key indicators for 
the several messages, though we may not know how much of a message is to be 
found in one cycle ard how much in the next cycle. Tnus, the indicators 
for message 1 are 060 and 050, the difference being 10. Those for message 2 
are 670 and 660, the difference also being 10. Therefore, the beginning 
of the second message ie in the same cycle as the whole of message 1. The 
indicators for message 3 are 225 and 216, the difference being 9. This shows 
that message 3, with respect to message 1, is in cycle 2j since in the first 
the two key tapes are 10 letters apart as regards their points of 
and in the third message only nine letter’s apart. Now the difference 



message 

origin. 



longer Key 
Shorter Key 
Cipher 
Plain tort 

Longer Key 
Shorter Key 
Cipher 
Plain tact 

Longer Key 
Shorter Key 
Cipher 
Plain text 

Longer Key 
Shorter Key 
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between 225 and 060 is 165 . So that we my place the first letter of 
message 3* thich belongs to cycle 2, under the 165th letter of message 1 0 
We can now fit in the portion of message 2 which belongs in the second cycle* 
since we note that the placement of message 3 allows roam for 225 letters of 
message 2 in cycle 2* leaving 330 letters* which will be exactly enough to 
fill up 1*000 letters in the first cycle. However, we do not need to do even 
t}iis much* for we can work with beginnings of messages. Thus* given the 
following series of key indicators for as many messages* they can be arranged 
as shown in Fig. 13. 

MESSAGES 



Mess- 


Indicators 


Diff- 


Cycle 


Mess- Indicators 


Diff- 


Cycle 


age 




erence 




age 




erence 




1 


42D-385 


35 


1 


14 


212-189 


23 


13 


2 


430-399 


31 


5 


15 


517-483 


34 


2 


3 


320-291 


29 


7 


16 


476-^56 


2D 


16 


4 


755-729 


26 


10 


17 


706-687 


19 


17 


5 


830-802 


28 


8 


18 


468-450 


18 


18 


6 


103-079 


24 


12 


19 


316-299 


17 


19 


7 


465-433 


32 


4 


20 


011-994 


16 


20 


8 


001-978 


21 


15 


21 


050-035 


15 


2L 


9 


670-643 


27 


9 


22 


200-186 


14 


22 


10 


210-177 


33 


3 


23 


286-273 


13 


23 


11 


035-010 


25 


11 


24 


095-083 


12 


24 


12 


212-190 


22 


14 


25 


001-989 


11 


25 


13 


516-486 


30 * 


6 











There are several points wlwe an attack nay be made* when the 
messages are arranged as shown in Fig* 18. Both keys may be recovered com- 
pletely or nearly so. No matter how the toy indicators may be used* given 
a sufficient amount of intercepted traffic* enough text can be obtained to 
make it possible to arrange the cycles with reference to one another so 
that a solution may be achieved.- The cryptographer is guided by the key 
indicators in hie arrangement of messages preparatory to decipherment and 
nob by the order in which they happened to have been sent. 
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ADDENDUM I. 

\ 

OPINION BASED UPON THE SIGNAL CORPS ? M5PIFIED IETHOD OF USING 
THE A. T. & T. MACHINE CIPHER. 

The purpose of this maaorandun Is to set forth our opinion, with the reasons, 
that the A. T. & T. machine cipher as now used by the Signal Corps is decipherable 
by the sane principles as already established and as already admitted to be effec- 
tive by the representatives of the M. I. D. and the Signal Corps* 

« 

The following is a transcript of the rules for the operation of the machine 
for cipher purposes, as set forth in a pencil memorandum by Lt. Col. J .O.Mauborgne . 

(hder of Punching Tape, 

10 line feeds 

6 letters representing numerals of tape -settings 
as PPPTWT ( 600525 ) 



During Ca.pt * 

Fowler’s tine 
enciphering began here. 

Letter — or letters designating cipher office, as "X n , "NP M etc. 
Figure shift (6) 

Cipher bureau serial number of message 
Space (3) 

Figures (6) 

Check or word count in numerals 
Letters — line feed (5-2) 

Place from — — • 

Date 

Time filed 

Carriage return — line feed. 

Early 1919 
Enciphering 

begins 

Name — address — body of message — signature 
Hh ciphering ends. 

Che line feed *— 15 carriage returns. 

Note — Tapes A and B vary in length depending upon number of letters 
to be sent in one d^r. For example, we might use 700 on the A tape 
and 699 on the B, or 650 on the A tape and 365 on the B, etc. 

***** 

The differences between the original method and the modified method of 
using the machine can be summarized as follows! 

ORIGINAL MiD MODIFIED METHOD 



TAPES 

1. (he tape is one letter 1. One tape may be any number 

longer than the other tape. of letters longer than the other tape. 

2. The number of letters in 2. The tapes vary from day to d^ 0 

each tape is constant from day to day. 




REF ID:A516913 



n 






SHIFTING THE TAPES 

3* The tape 8 are either 3<> The tapes are shifted m 

not shifted at all between unequal number of letters after each 

messages or are shifted together message* For example, the A tape 

the same number of letters* may be shifted 10 spaces, the B tape 

14* 

BEGINNING OF ENCIPHERED MESSAGE 

4* Each message begins with 4* The enciphered portion of message 

the functions represented by 4425* begins at once with the name and address 

of the person to wham the message is sent. 

USE OF FUNCTIONS AND PUNCTUATION 

5* All functions and 5. Some functions and punctuation may 

punctuation are used as in or may not be used, i. e„, there may be spaces 

ordinary typewritten matter* (3) between words, ooraaas (6K5), paragraphs 

(44233333) etc., with the exception of (442) 
vhich is absolutely necessary for the function- 
ing of the machine. 

We shall now show that these differences as set forth above do not change the 
nature of the cipher in a manner 00 as to prevent an attack by exactly the 
same principles as elucidated before, first, because it is unnecessary to know 
either the lengths of the tapes, or by how much they differ, secondly, because 
the shifting of the two tapes an unequal number of letters has no bearing upon 
the case at all, third, that even should the aicipherrasnt begin with some unknown 
text aid not with the functions 4425 that there is a sufficient nunber of possi- 
bilities to try out in other place a j and fourth, that the presence or absence of 
certain functions and of punctuation may make the problem a little more difficult 
but by no means msolvahle. 

1. THE TATES . 

In order to eliminate all ambiguity v/e shall define the word "cycle” 
and the phrase "sequent cycles" as follows: 

(a) CYCLE. That relation which exists between the two key tapes after 
one tape has made one complete revolution. Cycles may be measured by either the 
longer tape or the shorter tape, and in our work we have used the longer tape as 
the measure of a cycle. 

(b) SEQUENT CYC3JSS. Two cycles are sequent when the longer tape occupies 
the same absolute position in both cycles and the shorter tape is displaced one 
and only one letter in one cycle as compared with the other. In all the drawings 
and figures this displacement is to the left. When the key indicators for one 
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ne8 sags differ by an amount, X, and those for enother message differ by 
X + 1 or X - 1, then we hare a case of sequent cycles. TChen the lengths of 
the key tapes are unknown this difference must be expressed in terms of 
either a positive or a negative quantity. Example: Key indicators 075 *■ 

125* difference ss -50. Key indicators 125 - 075* difference *» + 50. 

In the original rasthod the knowledge that the two tapes differed by hut 
one letter in length enabled us to sey that sequent cycles represented a dis- 
placement of the shorter tape of but one letter each time, I^is, in turn means 

that sequent revolutions of the longer tape coincide with sequent cycles. In 

other words, a progression from say the end of the second revolution to the end 
of the third revolution means a progression of one complete cycle and represents 
a displacement of one letter of the shorter tape. 

If the tapes differ in length by more than one letter, for example, if 
the two tapes differ by 50 letters, then the displacement of the shorter tape 
will be 50 letters per revolution of the longer tape, in which case it is clear 
that sequent revolutions of the longer tape will not coincide with sequent cycle S o 

Fig. IB and the discussion applying to it shows clearly that these messages 

were supsrinposed by reference to the key indicators only. The crucial point is 
this, that in the solution of a single long message a knowledge of the lengths of 
the key tapes is absolutely essential; without this knowledge the length of a 
cycle and the displacement in sequent cycles never can be determined, which in 
turn means an inability to superimpose cycles so that the principles of solution 
can be applied. But in the solution of a series of gassages a knowledge of the 
lengths of the key tapes is entirely ivmecessary, since sequent cydLes are 
determined not from such a knowledge but solely from the key indicators for 
the respective messages. The displacement in sequent revolutions may be any number 
of letters, a matter of no concern to us, but the displacement in sequent 
cycles (according to cur definition of the phrase) is always one letter, and 
there can be no doubt that that messages in sequent cycles can be found, as will 
be Illustrated below. To sum up, therefore, a knowledge of the lengths of the 
two tapes is entirely unnecessary for the super imposition of cycles, preparatory 
to decipherment of a series of aeseages. 



REF ID:A516913 



n ^ 

2. DAILY VARIATION IN LENGTHS OF TAPES B 

The fact that there, is a daily variation in the lengths of the tapes in 
the modified method as conpared vdth a constant length in the original method 
has no bearing upon the case because as stated in the preceding section, a 
knowledge of the lengths of the tapes is unnecessary for the solution of a 
series of messages, and secondly, because the fhct of constancy in the lengths 
(as vaa the case in the original method) is per se of no importance in such a 
8 elution o 

3. SHIFTIKG THE TAPES . 

Tha shifting of the tapes, together or singly, equal or unequal distances 
in all instances has no bearing upon the case, because such shifting does not 
preclude the possibility of the occurrence of sequent cycles,, As a matter of 
fact, the unequal shifting of the tapes, after each message, is a highly danger- 
ous procedure because it makes possible the accldmtal encipherment of two mes- 
sages her an identical resultant sirtaie fag, such proceeding introduces 

many possibilities of "overlaps. n Every case in which the difference between 
the key indicators is the same represents a case of an "overlap". 

4. FUNCTIONS ELIMINATED AT BEGINNING . 

The fact that in the original method messages began to be enciphered with 
the fltnctions 4425 only eliminated the necessity of assuming pLain text for the 
beginning of a message, i. e., if we know that each message begins vdth 4425, the 
trial of the most frequently recurring polygraphs in the corresponding position 
in the next sequent cycle is all that is necessary to get a start. H owever, in 
the modified rasthod tha re remain many other points of attack, for the encipher- 
ment begins with a name and an address. This must contain, in military messages, 
titles, initials, punctuation end functions such as figire and letter shifts, 
period, spaces,. All of these afford easy openings for attack, especially in 
view of the fact that the sending and the receiving stations can be determined 
with a fair degree of probability, 

5o ELIMINATING PUNCTUATION etc . 

The elimination of all punctuation, and such functions as space and paragraph 
would not complicate the solution any more than their absence in ordinary cipher 
moseagoe doea. However, the functions 442 (carriage return and line feed) are 
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absolutely necessary for the proper operation of the machine and therefore their 
elimination is imposslhLe. T^e length of lines is not highly variable in nature, 
and it Is reasonably certain that in the body of the message the functions 4 42 
oust recur at intervals approximating 60 letters. 

The indicators and lengths of the following series of 17 messages illus- 
trate the foregoing points. This series of hypothetical messages was drawn up 
according to the rules as laid down In the memorandum submitted by the Signal 
Corps, end represent what happens in the traffic of only one station of possibly 
four. This station has been assigned one fourth of the length of one tape, in 
accordance with the plan set forth. The tapes for the day are 700 and 670 letters 
in length. Station 1 has been assigned the region from 001 to 160 on the shorter 
tape. At no time must the difference between the key indicators exceed 16 0* other- 
wise Station 1 will be encroaching upon the region assigned to another station, 
or as we shell say, he will bs "out of bounds." The data fcr this series of 
hypothetical messages are as fellows: 
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TAPES 
700 - 670 



lies sags 1. 076 - 055 (a) 
361 - 361 (c) 
437 - WS (d) 

2. 442 - 417 (a) 
206 - 206 (c) 



s 21 (b) 



=25 (b) 



3. 418 - 362 (a) =56 (b) 
368 - 366 (c) 

786 - 730 

700 - 670 (e) 

086 - 060 (d) 

4. 090 - 068 (a) = 22 (b) 

°) 

675 - 653 (d) 

5. 362 - 262 (a) = 100 (b) 
287 - 287 (c) 

649 - 549 (d) 

6. 655 - 550 (a) = 105 (b) 
688 - 688 (c) 

1343 -1238 
700^670 <•) 

643 - 568 (d) 

7. 649 - 597 (a) = 52 (b) 



= 22 (b) 



954 - 902 

m-M <•) 

254 - 232 (d) 

8. 259 - 232 (a) 
323 - 323 (c) 
582 - 555 (d) 

9 195 - 076 (a) 

jULzJM M 

642 - 523 (d) 



= 27 (b) 



= 119 (b) 



= 130 (b) 



= 127 (b) 



KEY TO EXPLANATORY 



MARKS : (a) 

(b) 

(c) 

(d) 

(«) 



10 . 658 - 532 (a) = 126 (b) 

k2LzJ£L (c) 

1145 -1019 
700 - 670 (o) 

445 - 349 (d) 

11. 449 - 385 (a) = 64 (b) 
508 - 508 (c) 

957 - 893 
700 - 670 (e) 

257 - 223 (d) 

12 . 260 - 236 (a) = 24 (b) 
418 - 418 (c) 

678 - 654 (d) 

13. 480 - 350 (a) = 130 (b 
216 - 216 (c) 

696 - 566 (d) 

14. 698 - 571 (a) = 127 (b 
267 - 267 (c) 

965 - 838 
700 - 670 (e) 

265 - 164 (d) 

15 . 272 - 170 (a) - 102 (b! 

208 - 208 (c) 

480 - 378 (d) 

16. 495 - 399 (a) = 96 (b) 
416 - 416 (c) 

911 - 815 
700 - 670 (e) 

2-1 - 145 (d) 

17. 225 - 202 (a) =23 (a) 
408 - 408 (c) 

633~“610 (d) 



Indicators at beginning of message. 

Cycle as determined from their difference. 
Length of message. 

Fbsitions of tapes at end of message. 
Subtraction for length of tapes. 



= 102 (b) 



s 96 (b) 
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ADDENDUM 2 



SUMMARY 

In this Addendum we shall show: 

a. how the test messages submitted by the Signal Corps were 
deciphered. 

b. that the present system, which employs key tapes dif- 
fering in length by more than one letter, is much more unsafe 
than the former method in which key tapes differing in length by 
one and only one letter were used. 

c. how the trials for possible plain text are reduced to 
simple terms, enabling a great number of trials to be made within 
a short time. 

d. methods of solving cases not involving sequent cycles. 

1. PRINCIPLES USED IN THE SOLUTION OP THE TBST MESSAGES 

It may be said at the outset that the principles which were 
involved In the solution were basically those set forth in the 
original manuscript and its Addendum 1. The steps were as 
follows : 



a. First, the plain text preamble for each message was 
read. This gave the key indicators, the serial number of the 
message, the number of words, the place of origin and date. For 
example, the first message sent by the station at Hoboken gave 
the following preamble: 

EWPPQA6Q5?6560R52HQ3P30F3E3H0B0KEN5NJ5SEPT56W56TRP55P^^2 

"Translated," this would read as follows: 

322 * 001 (Series)A (No.)l l4(words) HQ P(ort) of E(mbarkation) 
Hoboken NJ Sept 22 5:40 P(M) 

Then the total number of characters in the message was 
determined by count, beginning with the character Immediately 
following the 442 and extending to the beginning of the series 
of 2*s or 4's at the end of the message. 

By classifying the tapes in accordance with their points 
of origin, and then in accordance with their serial numbers, the 
following list resulted: 



Message 

No. Indicators 



1 126 * 001 

2 406 * 281 

3 729 * 604 

4 324 * 347 

5 539 * 562 

6 771 * 155 

7 261 * 432 



List of Messages 

WASHINGTON SERIES 

Message 



Length No. 



278 8 

321 9 

380 10 

213 11 

230 12 

276 13 

423 14 



Indicators 


Length 


687 * 228 


491 


393 * 082 


182 


577 * 266 


438 


230 * 067 


252 


'484 * 321 


304 


002 * 626 


331 


335 * 320 


484 
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Message 






No. 


Indicators 


Length 


15 


034 * 167 


314 


16 


350 * 483 


341 


17 


693 * 187 


237 


IS 


145 * 426 


264 


19 


887 * 053 


333 


20 


746 * 388 


281 


21 


242 * 032 


182 


22 


426 * 216 


326 


23 


754 * 544 


270 


24 


239 * 177 


629 


25 


083 * lo9 


1959 


26 


470 * 213 


228 


27 


700 * 443 


304 


2& 


219 * 110 


437 


29 


658 ♦ 549 


308 


30 


181 * 220 


481 


31 


664 * 064 


214 


32 


093 * 280 


410 


33 


505 * 053 


254 


34 


698 * 309 


236 


35 


212 * 547 


244 


36 


458 * 154 


275 


37 


735 * 431 


362 


38 


312 * 156 


323 


39 


637 * 481 


491 


40 


350 * 335 


142 


41 


487 * 479 


318 


42 


020 * 160 


275 


43 


297 * 437 


374 


44 


673 * 984 


206 


45 


094 * 382 


378 






HOBOKEN 


Message 






No. 


Indicators 


Length 


1 


322 * 527 


191 


2 


515 * 194 


532 


3 


971 * 089 


195 


4 


460 * 287 


203 


5 


665 * 492 


2$3 


6 


133 * 108 


229 


7 


364 * 339 


429 


8 


008 * 131 


388 


9 


398 * 521 


3370 


10 


770 * 254 


213 


11 


198 * 469 


177 


12 


377 * 009 


245 


13 


624 * 256 


235 


14 


733 * 493 


358 


15 


434 * 214 


275 


16 


711 * 491 


345 


17 


271 * 199 


178 


18 


451 * 379 


224 



Message 

No. 


Indicators 


Length 


46 


474 


# 


123 


421 


47 


110 


* 


546 


319 


48 


431 


* 


228 


359 


49 


005 


* 


589 


400 


50 


407 




362 


326 


51 


735 


* 


041 


582 


52 


532 


* 


625 


273 


53 


020 


4 


261 


309 


54 


331 


4 


572 


150 


55 


483 


> 


085 


403 


56 


101 


4 


490 


403 


57 


506 


4 


256 


378 


58 


0$9 


4 


636 


783 


59 


097 


4 


143 


492 


60 


591 


4 


004 


221 


61 


027 


4 


221 


381 


62 


408 


4 


602 


237 


63 


647 


4 


202 


327 


64 


189 


4 


531 


295 


65 


486 


4 


189 


300 


66 


001 


4 


491 


195 


67 


198 


4 


049 


424 


68 


624 


4 


475 


411 


69 


250 


4 


259 


318 


70 


570 


«■ 


579 


262 


71 


047 


« 


204 


161 


72 


210 


4 


367 


208 


73 


420 


4 


577 


202 


74 


624 


• 


142 


149 


75 


775 


4 


293 


133 



SERIES 



Message 

No. 


Indicators 


Length 


19 


772 


# 


605 


294 


20 


186 


* 


971 


215 


21 


403 


* 


479 


456 


22 


733 


« 


298 


370 


23 


446 


# 


031 


314 


24 


762 


* 


578 


407 


25 


479 


* 


117 


165 


26 


552 


■» 


285 


354 


27 


121 


*• 


002 


3 66 


28 


489 


* 


370 


7 53. 


29 


455 




484 


1089 


30 


759 


* 


297 


396 


31 


370 


* 


056 


1200 


32 


785 


•* 


619 


562 


33 


942 


» 


544 


523 


34 


300 


* 


430 


512 


35 


027 


* 


305 


495 



2 
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MEW YORK SERIES 



Message 



Mo 


Indicators 


Length 


1 


714 * 001 


157 


2 


086 * 160 


307 


3 


395 * 469 


235 


4 


891 * 067 


761 


5 


618 * 191 


205 


6 


058 * 398 


365 


7 


405 * 126 


329 


6 


736 * 457 


577 


9 


528 * 397 


316 


10 

11 


059 * 076 
646 * 024 


585 

359 


12 


220 * 385 


253 



Message 



Mo 


Indicators 


Length 


13 


576 * 002 


236 


14 


714 * 240 


272 


15 


201 * 514 


302 


16 


505 * 179 


235 


1J 


742 * 4l6 


231 


18 


188 * 010 


276 


19 


418 * 288 


284 


20 


752 * 574 


134 


21 


101 * 071 


128 


22 


231 * 201 


133 


23 


366 * 336 


143 


24 


511 * 481 


91 



I NORFOLK SERIES 

i 

I 



Message 



Mo. 


Indicators 


Length 


A . 

mL 

1 


518 


* 


001 


514 


. 2 


247 


« 


517 


320 


3 


569 


» 


200 


271 


4 


055 


* 


473 


274 


5 


331 


* 


110 


270 


6 


612 


* 


391 


3o8 


7 


215 


» 


142 


163 


8 

9 


380 

521 


* 

* 


307 

448 


139 

446 


10 


182 


* 


257 


677 


11 


074 


* 


297 


407 


12 


483 


* 


067 


227 


13 


712 


» 


296 


273 


14 


200 


« 


571 


279 


15 


48l 


* 


213 


195 


16 


678 


* 


410 


990 
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b. Hext, the lengths of the two keys were determined, from 
a mathematical analysis of the foregoing lists. Consider, for 
example, the first few messages emanating from Washington, paying 
particular attention to the key indicators, and the length of each 
message. For example, Washington 1 begins at 126 * 001 and 
contains 278 letters 1 . It is evident that at the end of the mes- 
sage the keys would be at points, hereafter designated as "loci," 
270 letters beyond the original loci. Thus; 

Washington 1 .... 126 * 001 
Length 278 278 

404 * 279 



The key indicators for Washington 2 are 406 * 28 l, two in advance, 
respectively, of the loci where Washington 1 left off. It is evi- 
dent that before beginning on the next message Washington 2, which 
has 522 letters, the encipherer "slipped" both key tapes two letters. 
Adding the number of letters here again to the key indicators, we 
have the following; 



Washington 1 
Length 

31ip 

Washington 2 
Length 



126 * 001 

278 27 8 

w S h r m 

( 2 2 ) 

406 * 2dl 

22 



322 

7t§“S" 



03 



Washington 3 begins at 729 * 604, in other words, after a ."slip" 
of 1 letter in each key. 

Now Washington 3 has 380 letters. Let us add 380 to the 
key indicators. Thus; 

Washington 3 729 * 6o4 

Length .... 380 380 

llSFW 



The result should correspond< approximately with the key 
indicators for the next message, but Washington 4 gives as indica- 
tors 324 * 347« It is evident, therefore, that both key tapes 
have completed one revolution and are 323 and 346 letters, res- 
pectively, beyond their initial loci, viz, 001. If now we find 
the difference between the theoretical pair of indicators, 

1109 * 984, and the actual pair, 324 * 347, we shall begin to 
approximate the lengths of the keys . Thus ; 



Washington (theoretical initial loci 
4 (actual 



1109 * 984 




We begin to suspect that the longer key is about 785 
letters in length, the shorter, about 637* We must, therefore, 
determine not their approximate lengths, but their exact lengths. 

If there were no slip between Washington 3 and Washington 4, then 
the numbers 785 and 637 would coincide with the exact lengths of 
the keys. We do not know whether there has been a slip between 
these two messages, or, if there has been, whether the slip was 
the same for both key 3 . But we do not have to determine that 

1 'n 1 1 1 — — * — .11 1 "n "mnw i i -nnnuniBi i trm~ .nnri.M.i ■ * — mnr~ 

*We shall use the word "letters" to include all the characters 
and "functions" of the machine, as they appear on the cipher tapes. 
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immediately . Let us turn our attention to a case In which only 
one of the key tapes completes a revolution within a message . 

Por example, consider Washington 5# with key Indicators 539 * 562, 
length 2J0 letters; and Washington 6, with key indicators 771 * 155 , 
length 276 letters. Let us calculate as before. 

Washington 5 * • • • 539 * 562 
Length .... 230 230 

fojP r ?9£ 



If there has been a slip of two letters on both key tapes, 
then Washington 6 should begin at 771 * 794. But in reality, the 
key Indicators for this message are 771 * 155 . Still assuming an 
equal slip of two letters, then locus 792 + 2 s 794, which coincides 
with locus 155. Taking the difference, 794-155 = 639* which would 
be the exact length of the short key. Above, we bad determined 
the approximate length as 637* 



Applying the same process to determine the exact length 
of the long key, taking Washington 6 and 7 for calculation, we 
find the following: 



Washington 6 
Length 



. . . . 771 * 155 

276 276 

1647 * 431 



Washington 7 begins at 261 * 432. Since the indicators 
as regards the short key differ only by 1, ve assume an equal slip 
of 1 for both keys. Therefore locus 1047 -+■ 1 = 1048, which coin- 
cides with locus 261. Then, likewise, 1048-261 =• 7*7# the exact 
length of the long key. Our approximate length was 785 , as 
determined above. 



It now remains to teat these determinations on all mes- 
sages, their correctness being based upon the consistency with 
Which the theoretical key indicators for each message agree with 
the actual, taking into account the assumption that the two key 
tapes were slipped an equal distance in every case. There may be 
a variation In the amount of slip between successive messages, 
but so long as in each case both tapes are slipped through the 
same distance, the result would be exactly the same as though each 
message were 1, 2, 3 letters longer than Is actually the case, 
with no slip whatever Involved. A careful study of the calcula- 
tions which follow will show that there could not possibly be any 
doubt about the correctness of the two determinations, 787 and 639- 
There are several discrepancies, it is true, but they were due to 
errors, or carelessness on the part of the encipherer, as will 
be discussed later. 



Before giving the complete calculations for the series 
of messages, we shall Introduce into the discussion a feature 
which concerns what we have termed latent cycles . (For defini- 
tion of the ordinary cycle see page 2 of Addendum 1 . ) 

Consider Washington 3* for example; it begins at 729 * 604, 
or in the 125 th cycle and ends at 322 * 345# or in the minus 23rd 
cycle. The message involves, therefore, at least two cycles. 

But there is in reality an additional cycle involved. For, after 
the message has proceeded for 36 letters, the short key is at 
locus 640, which coincides with locus 001, since the key is 639 
letters in length. But while the short key is at locus 001, the 
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long key la at locus 729 36, or 765* After the 56th letter, 
therefore, the message proceeds in cycle 765 -001, or cycle 7 64. 
This we term the hidden or latent cycle, in contradistinction with 
the open or patent cycles (whi chare shown by the key Indicators 
themselves), because the existence of the latent cycle is dis- 
closed only by the calculations made as a result of the determina- 
tion of the exact lengths of the two key tapes. These relations 
oan be demonstrated very simply, thus: 

Washington 3 . . . . 729 * 604 Cycle 125 

(length 380 letters) .... ^6 ^ ^6 



765 * 001 Cycle 764 

But this message is 380 letters in length and continues 
to be enciphered after the 36th letter. Proceeding for 23 letters 
more, the long key reaches the locus 788, which is in reality 
locus 001, since the long key is 787 letters in length. The short 
key, after 23 letters, is at locus 024. The difference between 
the two loci 001 and 024 is therefore -23, end the message is now 
proceeding in the latent -23rd cycle. It continues to do so until 
the end of the message. These relations are summarised mathematic- 
ally in a standard fora as follows: 



Message 

Ho. 

Washington 3 



Indicators 

729 * 604 

36 _36 



Length 
ial T< 



Partia 



otal 



Cycle 




Snd of Wash. 3 . . 322 *' 3^5 

The calculations which apply to the entire series of messages 
are as follows: 

WASHINGTON SERIES 



Message 

Ho. 



Indicators 


Length 

Partial total 


Cycle 


126 * 
278 
TOT*" 
( 2 


001 

218 

^79 

2) 


278 


278 


125 


466 '* 

322 


■58l 

322 


322 


322 






36 36 
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Message 

No. 


Indicators 


Length 

Partial Total 


Cycle 


3 

cont *d. 


765 * 640 
765 * 001 




764 




23 23 


23 






788 * 024 
001 * 024 




-23 





617 * 001 
152 152 

m ^T53 x 

jui—Lg 1 

f % * X55 

Tsihn^i- 

001 * 172 
259 259 



■4sr* -, 43 i 

208 208 



469 * 001 

215 215 



W’* 1 S’il' 

101 101 



001 * 329 
311 511 



512 * 001 



-in 



-328 

311 



182 182 
57 $ * £ 54 ' 
( 2 2] 
577* 366 
211 211 



001 * 477 

163 163 

164 * 640 
164 * 001 

64 64 

228 * 065 
(2 2 ] 
236 * 067 



-476 

16 ? 



1 
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Message 
Mo. _ 



Indicators 

746 * 388 
42 42 

758 

001 * 430 
210 210 



211 * 001 
29 29 



Length 
Partial frotal 




182 182 




001 * 578 
62 62 




02 *001 



?88 *~w 
001 * 087 
80 80 




471 ^ 471 

554 * 001 

234 234 

785 5-235 
001 * 235 

405 405 

555 *~&0 

406 * 001 

382 382 
755 *'383' 
001 * 383 
257 257 



258 * 001 
211 211 



42 




210 




29 


281 


182 


182 


326 


326 


34 




62 




174 


270 


463 




86 




80 


629 


471 




234 




405 




382 




257 




211 


I960 



Li— 

^0 * 
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Indicators 

184 * 260 
( 2 2 ) 
'I BS ' ygfes 

215 215 
461 * 477 
(2 2 ) 



564 * 001 
224 224 
7B8“» '255 
001 * 225 
71 71 




416 * 001 
28 28 





26 26 . 

001 * 575 

267 267 

S58-*-646 

268 * 001 

114 114 





236, 236 



001 * 521 
118 118 



121 * 002 
366 366 

Wf S3S8' 
{ 2 2] 
■tel 4 370 

270 870 

759 * 646 
759 * 001 
29 29 
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Indicators 



500 * 4-50 
210 210 
5nr*"5w 
510 * 001 
278 278 

Y8BT '*”279 

001 * 279 



al § 



Length 

Partial Total 




562 * 001 
160 160 



SEW YORK SERIES 



Indicators 

f~7l4 * OOll 
74 74 

Y8S"*“t575 

001 * 075 
83 83 



Length 

Partial Total Cycle 




171 171 

56 ^ *~6 te 
566 * 001 
64 64 




156 156 

7 o 8 ‘ 

001 * 223 

417 417 

418 *' 64'6 
4l8 * 001 
188 188 
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Message 

Wo. 



Indicators 

101 * on 
128 128 



Length 

ilalTc 




NORFOLK SERIES 



Indicators 

518 * 001 
270 270 

001 * 271 
244 244 



Length 

Partial flotal 




370 * 001 

12 J . . -191 

507 *198 

219 219 

788 *”419 

001 * 419 



( 2 2] 

"531 »T1?T 

HMB 

176 176 
785^367 
001 * 567 
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Message 

»o. 



Indicators 

481 * 215 
195 195 



Length 

Partial Total 



“ 5 

110 110 
mr^o 
001 * 520 
120 120 



Cycle 



-519 



121 * 001 

M 

760 * 001 
28 28 



001 * 029 



Remarks on Calculations 

It Is to be noted that these calculations exhibit a remarkable 
consistency, and corroborate the calculated lengths of the two 
keys, 787 and 639, respectively. By the consistency of the calcul- 
ations we mean that it would be utterly impossible to have the 
calculated slip between messages equal for both keys in every case 
as a result of coincidence; for, unless the assumed lengths of the 
two keys be correct, the slip would be unequal and inconsistent 
in many places. The fact that they are equal means that the 
encipherer was consistent in slipping both tapes an equal distance 
every time. The idea behind an equal slip is not clear, for it 
entirely defeats its own purpose, which is to prevent the enemy 
from determining the lengths of the keys. Had the encipherer slipped 
them unequal distances in every case, being careful, of course, 
to slip the short tape further than the long, no such consistency 
would have been possible to uncover. But, In this case, the pos- 
sibility of overlapping messages, would be greatly increased, as 
will be shown subsequently. 

As mentioned above, there are several discrepancies, due to 
errors on the part of the encipherer. That they are errors, and 
not intentional operations intended to deceive the enemy i 3 shown 
by their nature. For example, the slip between Washington 68 and 
69 Is 2 * 12. Evidently the encipherer meant to have Washington 
69 begin at loci intervals away from where Washington 68 ended, 
and probably misread the number 249 on the short tape, making it 
259* This becomes the same as though he had slipped the long 
tape 2 letters and the short one 12. In the New York messages 
another error of 10 is involved between messages 4 and 5- Had 
this error not occurred there would have been afforded about twice 
as many nossible noints oi attack as were actually the case, as 
will be 3 ^own~~later J 
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Excellent corroboration for the determined lengths of keys 
Is afforded by finding the total numbers of letters in all mes- 
sages emanating from each station, adding the total amount of slip 
and then calculating as if only one message were concerned. The 
final result should coincide with the result obtained from cal- 
culations for the individual messages. Thus: 




Initial loci 

Total number of letters enciphered 

Total slip 

Sum 



Minus 

and 



33 revs, of long key) 
40 " n short " ) 



Pinal loci 



• » • 



126 * 001 
25834 2583^ 




121 * 426 



(2) Hoboken 3eries 

Initial loci 322 * 001 

Total number of letters enciphered . . . 13503 13503 

Total slip 

Sum 

Minus 17 revs, of long key 
and 21 n " short " 

Pinal loci 522 * 161 




(3) Hew York Series 

Initial loci - 714 * 001 

Total number of letters enciphered . . . 6914 6914 

Total slip 

Sum 

Minus 9 revs, of long key 
and 10 " ” short * 

Pinal loci 602 * 572 





(4) Norfolk Series 

Initial loci 

Total number of letters enciphered . . . 

Total slip 

Sum 

Minus 8 revs, of long key) 

and 9 " n short ” ) 

Pinal loci 
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In eaoh case it will be noted that the final loci coincide 
vith those given by the individual calculations, in perfect accord 
vith the requirements based upon keys 787 and 639 letters in 
length. 

The purpose of all these calculations was to find such cycles 
as vould fora the basis of an attack. A table vas made, therefore, 
shoving all the cycles, both plus and minus, involved in the series 
of aessages (see Table 1 ) * 



The most favorable relation of cycles for an attack being 
three sequent cycles (for definition see page 2 of Addendum 1), 
an examination of this table vas made vith a vlev to finding three 
sequent oycles. These were found, showing first in Table 1 in 
oyole 8 4l|, 416, and 417, messages Hoboken 22, Norfolk 11, and 
New York 4, respectively. 



By referring to the calculations on pages 6-25# it will be 
seen that the three sequent cycles begin in reality vith Hoboken 
19 j latent cycle 711; Norfolk 9, latent cycle 712; and Nev York 1, 
latent cycle 713 . They end with Hoboken 24. latent cycle 415; 
Norfolk 13, latent cycle 4l6; and Nev York 4, latent cycle 417. 

The extent of the three sequent cycles is Indicated in the cal- 
culations for these messages by the brackets. 



Had no errors been made in encipherment, these three sets 
of messages vould have proceeded along in three sequent cycles 
to the following points: Hoboken 29, latent cycle -29; Norfolk 16, 
to its completion In latent cycle -28; Nev York 10, latent cycle 
(theoretical or what it should have been) -27. The error referred 
to on page 25 made between Nev York 4 and 5 therefore cuts the 
number 0 / possible points of attack in hair . 

c. The messages Involved were immediately transcribed 
in the usual manner in the form of three sequent cycles. There 
vere tvo excellent points of attack in these messages vhen arranged 
in this form. They vere excellent because tvo messages began In 
one case at exactly the same point; in the other case, very near 
the same point. One of these cases is shown below. (The initial 
points of all messages shown hereinafter will be designated by a 
vertical double bar surmounted by an asterisk.) 



Upper key loci 182 186 

Lover key loci 256 260 

NEW YORK 2 ... 6XTSQVQZKWCMCFWIDY3GD3A6JM . . . Cycle -74 



Upper key loci 
Lover key loci 
NORFOLK 10 

Upper key loci 
Lover key loci 
HOBOKEN 20 



182 186 
257 261 

3XH7GMBRHP3QSNI3MCZVCTRV0U 



186 

262 

3CTFJIXXLK3F4PKQ5LDYEQ 



Cycle -75 



Cycle -76 
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TABLE 1 



Distribution of Cycles 



Plus 

( 0 - 100 ) 

(Washington 68) 
Washington 39) 
Washington 13) 
Hoboken >2) 
Hoboken 5) 

Hew York 20) 
Washington 49) 
Washington 23 ) 
Hoboken 16) 
Norfolk 6) 



Minus 

( 0 - 100 ) 

-17 (New York 9 ) 
-23 (Washington 3) 
-28 (Norfolk 16) 
-29 (Hoboken 28) 
-39 (Washington 29' 
-46 Washington 58 , 
-74 New York l) 
-75 (Norfolk 9) 

.-76 Hoboken 19) 
-86 Washington 24 ( 
-93 (Washington 51 4 



Plus 



Minus 



102 (Washington 58 ) 
109 Washington 27 ) 

119 Hoboken 27 ) 

120 Norfolk 16) 

131 |Nev York 8) 

149 Washington 66 ) 
156 ‘Washington 37) 
l 6 > Washington 10 ) 
173 (Hoboken 2) 



Plus 



Minus 



Washington 47) 
Washington 20) 
Washington 14) 
.Norfolk 4) 
Washington 56 ) 
(Washington 25 ) 
Hoboken 24) 
Norfolk 14) 

New York 6) 
Washington 64) 



| New York 4) 
Hoboken 21 ) 
Washington 25 ) 
Washington 52] 
Norfolk 1) 
Hoboken 10 ) 
‘Hoboken 3*0 
Washington 17) 
(Washington 44) 
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I 



Plus 




'Washington 35) 
Washington 8) 
Hoboken 30) 
Hoboken 1) 

'New York 15) 
Washington 45) 
Washington lo) 
Hoboken 35) 
Hoboken 11 ) 
Norfolk 2) 
Washington 54} 



Plus 

(401-500 ) 

405 (Washington 25) 

415 Hoboken 22' 

416 Norfolk 11 

417 * New York 4) 

445 Washington 62 ) 
452 Washington 32 ) 
462 Washington 29) 
468 Washington 7) 
482 Washington 75) 
499 (Washington 43) 




-313 (New York 14) 
-315 (Washington 75) 
-325 (Hoboken 30) 
-328 (Washington 8) 
-555 (Washington 34) 
-342 (Washington 63) 
-360 Hew York 5) 
-371 Norfolk 13) 
-372 (Hoboken 24) 
-382 (Washington 25) 
-389 (Washington 55) 



Minus 




-4l8 (Norfolk 3) 

-419 (Hoboken 13) 
-429 Washington 20) 
-436 (Washington 46) 
-461 (New York 17) 
-466 Hoboken 2) 

-473 Hoboken 31 ) 
-474 (New York 13) 
-476 Washington 10) 
-483 Washington 37 
-490 (Washington 66) 



Plus 




506 (Washington 16) 
509 Hoboken 34) 

516 (Hoboken 9) 

517 .Norfolk l) 

546 Washington 52) 
553 Washington 25) 

563 Hoboken 21) 

564 (Norfolk 10 5 
593 (Washington 60 ) 



Minus 




-508 (New York 8) 
-519 (Norfolk 16) 
-520 (Hoboken 26) 
-530 (Washington 27) 
-557 1 Washington 57) 
-565 l 'New York 3) 
-566 (Norfolk 6) 

-567 1 Hoboken 16) 
-577 1 Washington 23) 
-5o4 (Washington 49) 



Plus 




610 (Hoboken 29) v 
6l6 Washington 5) 
622 New York 10) 
630 Washington 70 ) 
647 Washington 4l) 
657 Hoboken 33) 

664 Washington 7) 
670 New York 9) 
694 (Washington 50) 



Minus 





-631 

-638 

-654 



! New York 20) 
Washington 5) 
Washington 12) 
Washington 39( 
Washington 68) 
Washington 14) 
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Plus 




701 (Washington 24) 

712 Norfolk 9) 

713 We* York l) 
741 Washington 58 ) 
748 Washington 29 ) 
758 Hoboken 28 ) 
75? Norfolk 16) 

764 (Washington 3 ) 
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d. Sine© the messages begin with an address, it was only 
necessary to try out all the addresses that would be likely to 
occur in such messages. The modus operandi of these trials is 
given in Section 3 of this Addendum. Suffice it here to say that 
the assumption of TRANSP0RTATIQN3SERVTCB, as the beginning of 
Hoboken 20, and ADJTJTANT3GENERAL, as the beginning of Norfolk 10, 
yielded LEY^EQUIPMENT for New York 2. There was no doubt now that 
the messages were broken. Subsequent work meant merely the con- 
tinuation of plain text in three cycles and the simultaneous re- 
construction of the keys. As an aid in this process, one of labor 
and patience, it was found necessary to decipher parts of many 
other messages in cycles as close as possible to these three. 

For example, the closest cycle to cycle -76 was cycle -86, repre- 
sented by Washington 25. As soon as the firBt fifteen letters of 
the short key had been reconstructed, viz, 260 to 275 , these in 
conjunction with longer key letters in loci 186 to 201 were applied 
to Washington 25 at locus 186 in the longer key. They yielded as 
plain text JEACHJI^YJASJTHE . By applying the same steps to other 
messages, places in cycles -95, -123, -130, -133, -l4l, and also 
in -46, -59, -29, - 28 , -17, and -9 were deciphered, all with a 
viev to expediting the work of rebuilding the keys, which was all 
that was necessary to complete solution since we had no interest 
in the messages, per se . The work was divided between two sections 
of operators, one section working forward from locus 186 of the 
long key, the other working backward until the work joined. Even 
with this number of cycles to work upon, the work went slowly 
because of errors in the encipherment. It was completed, however, 
in a comparatively short time, and the resultant keys were tested 
upon isolated fragments of new messages and found to he correct. 

It 5.3 ncesssry to add that the messages were broken within 
ten minutes after one of those very slight but ever-present errors 
in transcribing the letters of ~ the origins f three sequent cycles 
had been uncovered . This error Involved the ' inadvertent' omission, 
by one of our clerical staff, of a single letter from Norfolk 9 at 
a locus in advance of 186, and resulted in baffling all efforts to 
solution for every hour subsequent to the finding and the tran- 
scription of the three sequent cycles. 

2. WHY KEY TAPES DIFFERING IN LENGTH BY MORE THAN ONE LETTER ARE 
CRYPTOGRAPHICALLY UNSAFE 

In the preliminary summary of this addendum it was stated 
that the present system of using this machine employing key tapes 
which differ in length by more than one letter Is much more un- 
safe than the original method employing key tapes which differ in 
length by only one letter. The reason for this Is that the present 
system not only makes the production of overlaps very possible , 
but also makes their production, under ^ertain circumstan.ce s, a 
legitimate function of ~ the~ machine . In fact, the messages pre- 
sented for test made a hairbreadth escape from such a fate.’ 

The point is well worth detailed explanation. 

The question which first arises In this connection is: Given 
the initial Indicators for each of four stations, can the cycles 
through which all messages will pass be determined beforehand? 

The answer is in the affirmative. In fact, the cycles through 
which each series of messages will pass themselves go through 
definite cycles. Let U3 refer to the calculations for the Hoboken 
series and set down In the form of a list the successive plus 
cycles involved: 
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The numbers in this list bear definite relations to one 
another , relations which are absolutely determined by the displace- 
ment, or difference in the lengths of the two key tapes. In this 
case the difference between the lengths of the two key tapes is 
787 - 639 148. This means that if we make our calculations upon 

the basis of a stationary long key tape, the displacement of the 
short key tape will be 148 letters per revolution of the long key 
tape. This in turn means that the progression of cycles for each 
series of messages, as determined by the difference between the 
key Indicators, will differ by the constant factor 148. Let us 
see if this is exemplified in the series of cyele numbers given 
above for the Hoboken messages. 



A 


Series as calculated 


Series as observed 


Initial cycle 


321 


321 




148 




2nd cycle of series 


173 


173 




148 - 




3rd cycle of series 


~~&5 


25 



If ve continue to subtract 148, we would begin to introduce 
minus cycles, and since it is more advantageous to deal only with 
plus cycles, let us convert cycle 25 to the next higher multiple 
of this cycle number, by adding the length of the longer key tape 
to It. 1 Then: 



This is legitimate since all the calculations are based upon the 
revolutions of the long key tape. 
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|5 

787 

8ft 

That is , cycle 25 is exactly the same as cycle 812. Hov let 
us deduct 148, as before: 

812 

148 

65? 

This agrees with the cycle number given by our list. We 
could have combined the two steps of adding 787 and then deducting 
148 in one step, by adding 639, the length of the short key, to 
25. This would give the next cycle number. Thus, 

25 



Let us continue 





Series as calculated 


Series as observed 


1 . 


321 

148 


321 


2 . 


I7J 

148 


173 


3. 


“25 


25 




787 

0 T 2 

148 




4. 


55? 

148 


664 


5. 


5 lF 

148 


516 


6 . 


55ST 

148 


368 


7. 


2 M 

148 


220 


8 . 


i 

148 


72 


9. 


TIT 

148 


711 


10 . 


B5J 

148 


563 


11 . 


-m 


415. 




etc. 


etc. 



Thus, it is apparent that every cycle through which each 
series of messages will pass can be predetermined, provided always 
that no errors are made in the encipherment . For, if the relative 
positions of the two key tapes be changed in the slightest degree 
at any time in the enciphering process, the natural or predetermined 
series of cycles will be modified. Such modifications actually 
occurred in the four series of test messages, entirely as a result 
of errors on the pert of the encipherer. 

We give in the two lists which follow the series of cycles 
which actually resulted from the encipherment, together with the 
series which theoretically should have resulted. Each series has 
been arranged with reference to the others in a manner designed 
to show the production of sequent cycles. 
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TABLE 2 



THEORETICAL SERIES 
Hoboken Norfolk New York 

(yssmi) (m*mj 



A CTUAL SERIES 

i lW i h — »— — — i mmmm m 

Wash . Hoboken^ Norfolk ^ Nev^York ^ 
125 









320 


321 






321 






172 


173 






173 






24 


25 






25 






663 


664 






664 






515 


516 


517 




516 


517 




367 


368 


369 




368 


369 




219 


220 


221 




220 


221 




71 


72 


73 




72 


73 




710 


711 


712 


713 


711 


712 


713 


562 


563 


564 


565 


563 


564 


565 ■* 


414 


415 


416 


417 


415 


416 


(417 ) 3 


266 


26 7 


268 


269 


267 


268 


(427; 


118 


119 


120 


121 


119 


120 


279 


757 


758 


759 


760 


75« 


759 


131 


609 


610 




612 


610 




770 


461 


462 




464 


462 




622 


313 


314 




316 


314 




474 


165 


166 




168 


166 




326 


17 


18 




20 


18 




178 


656 


657 






657 




30 


508 


509 






509 






360 


361 






361 






212 














64 









^Error made In slipping the two key tapes between Washington 
7 and 8 . 

Mirror made in slipping the tvo key tapes between Washington 
68 and 69* 

^Error made in slipping the two key tapes between New York 4 and 5v 
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A careful study of Table 2 discloses some very important facts. 

In the first place, the possibility of the production of over- 
laps is demonstrated very readily. Washington 1 began with the 
key indicators 126 * 001, and Hoboken 1 began with the key in- 
dicators 522 * 001. Had Hoboken 1 begun with the long key at 521 
Instead of 522, the Hoboken series would have begun Immediately 
to overlap the Washington series from the latter's cycle 520 on 
to the end of the Hoboken messages. Again, Norfolk 1 began with 
the key Indicators 518 * 001. Had Norfolk 1 begun with the long 
key at 517 instead of 518, or had Hoboken 1 begun with the long 
key at 525 instead of 322, the Hoboken and Norfolk series would 
have overlapped for the vhole length of the Norfolk series. 

Again, New York began with key Indicators 714 * 001, and Norfolk 
1 began with key indicators 518 * 001. Had New York 1 begun with 
the long key at 713 instead of 714, or had Norfolk 1 begun with 
the long key at 519 instead of 518, the Norfolk and New York 
series would have overlapped. 

The beginning points for each series were undoubtedly deter- 
mined by dividing the length of the long key by four (in order to 
divide the long tape Into four nearly equal parts) and adding this 
number to the long key starting point for each series consecutively. 
Thus, 787 + 4 =.196. Given the long key starting point for Wash- 
ington 1 as 126, the long key starting point for Hoboken 1 was 
12o + 196 a 322; that for Norfolk 1 was 322 + 196=518; that for 
New York 1 was 518+ 196*714. 

It is impossible, of course, to divide a prime number into 
four equal integral parts. In the case under study the length of 
the long tape Is 787- The number 196 Is the nearest Integral 
fourth part of 787, it is true, but the division of the long tape 
Into four parts is meant to be only approximate. The intention, 
as understood by us. Is to allot to each station a length of the 
long key proportionate to its requirements as regards its day's 
activity. With certain key lengths, the allotment on the basis 
of equal activity of four stations will result in the production 
of overlaps. Likewise, with other key lengths, the allotment on 
the basis of unequal activity will result in the production of 
overlaps. Examples will be given. 

Returning to thi3 case, had the number 195 been taken as the 
amount to be added consecutively, instead of 196, here are the 
starting points that would have resulted for the four series: 



Washington Hoboken Norfolk New York 
(126 * 001 (321 ■* 001) (516 9 001) (711 * 001) 

Had this been the case a four -fold overlap would have been 
produced. Note the sequences of cycle numbers. 



- 35 - 




Washington 


Hoboken 


(126 * 001 ) 


(321 * 001 ) 


125 

764 




616 




466 




520 


320 


172 


172 


24 


24 


663 


663 


515 


515 


367 


367 


219 


219 


71 


71 


710 


710 


562 


562 


etc. 


etc. 



Norfolk New York 

(516 * 001 ) (711 * 001 ) 



515 




367 




219 




71 




710 


710 


562 


562 


etc. 


etc. 



The cycle numbers would have coincided for the four series 
from cycle 710 onwards, and the four series of messages would have 
overlapped one another. 

That this is not stretching the possibilities of the situation, 
consider the results of the adoption of 787 and 669 as the two 
lengths. These numbers do not possess a common factor and are not 
multiples of one another, so that their choice as key lengths is 
legitimate and likely; The displacement is 787 - 669 llo. The 
allotment we will assume to be equal; the starting point for 
Washington 1, as 126 * 001 . The starting points for the other 
series and the cycles are as follows: 



TABLE 4 



New York 1 

(TO * OT7 

Cycles Cycles Cycles Cycles 



Washington 1 Hoboken 1 



Norfolk 1 



1 


125 


1 


321 


1 


517 


1 


713 


2 


7 


2 


20 > 


2 


399 


2 


595 


3 


676 


3 


85 


3 


281 


3 


477 


4 


568 


4 


754 


4 


163 


4 


359 


5 


440 


5 


636 


5 


45 


5 


241 


6 


322 


6 


518 


6 


714 


6 


123 


7 


204 


7 


400 


7 


596 


7 




8 


86 


8 


282 


8 


478 


8 


67^ 


9 


755 


9 


164 


9 


360 


9 


556 


10 


637 


10 


46 


10 


242 


10 


438 


11 


519 


11 


715 


11 


124 


11 


320 


12 


401 


12 


597 


12 


6 


12 


202 


13 


283 


13 


479 


13 


675 


13 


84 


14 


165 


14 


361 


14 


557 


14 


753 


15 


47 


15 


243 


15 


439 


15 


635 


16 


716 


16 


125 


16 


321 


16 


517 



etc. etc. etc. etc. 
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Not** now that a four-fold overlap vould.be the legitimate 
result of the choice of these lengths. This case is interesting 
also because it would produce four sequent cycles in addition to 
the overlaps. In other words, had the length of the short key in 
the series of test messages been 30 letters more than it was, not 
only would there have been produced four sequent cycles but also 
a four-fold overlap.* 

It may be desirable to give further instances. Let us assume 
two key lengths 811 and 753, two legitimate lengths. On the basis 
of equal activity, the allotment would be 811 * 4 - 202 letters of 
the long tape per station. Suppose we start with the indicators 
126 * 001 for the first message of the Washington series. The 
initial points for the other series will be as shown below: 



Washington 1 Hoboken 1 Norfolk 1 
(126 * 001) (328 * 001 ) (530 * 001) 



New York 1 
(732 * 001 ) 



Now let us calculate the various cycles and tabulate them. 
The displacement is 811 - 753 = 58* 



TABLE 5 



Washington 
(126 * 001) 



Hoboken 

(328 * 001 ) 



Norfolk New York 

(530 * 001 ) (732 * 001 ) 



1 


125 


1 


327 


1 529 


H-v 1 731 


2 


67 


2 


269 


2 471 


2 673 


3 


9 


3 


211 


3 413 


3 615 


4 


762 


4 


153 


4 355 


4 557 


5 


704 


5 


95 


5 297 


etc. 


6 


646 


6 


37 


6 239 


- 


7 


588 


7 


790 


etc. 




8 


530 


8 


732 






9 


472 


9 


674 






10 


4l4 


10 


61 6 






11 


356 


11 


558 






12 


298 


12 


500 






13 


240 


13 


442 






14 


182 


14 


334 






15 


124 


15 


326 






16 


66 


16 


268 


' 




17 


8 


17 


210 






18 


761 


18 


!52 






19 


703 


19 


94 






20 


645 


20 


36 






21 


587 


21 


789 






22 


529 


-f > 22 


731 






23 


471 


23 


673 






24 


413 


24 


615 
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lot© that tvo overlaps would be produced; the first cycle 
of the Norfolk series would overlap the 22nd cycle of the Washing- 
ton series; the first cycle of the New York series would overlap 
the 22nd cyele of the Hoboken series. 

Let us now take a case of differential allotment , assuming 
that the relative activities of four stations are in the proportion 
of 4t2tl:l. These proportions approximate the actual proportions 
in the series of test messages. We will adopt as key lengths 751 
and 651* The displacement is 100 per revolution of the long tape. 
Allotment on the basis of the ratios 4:2:1:1 gives as the initial 
points for the four stations the following indicators; 



Washington 1 
(100 * 001 ) 

Cycles 




99 

750 

650 

550 

450 

350 



etc. 



TABLE 6 

Hoboken 1 Norfolk 1 New York 1 

(472 * ooi) (658 * 001) (751 * 001) 



Cycles Cycles Cycles 



1 471 


1 657 


— 750 


2 371 


2 557 


2 650 


3 271 

4 171 


3 550 

4 450 


3 550 

4 450 


5 71 


5 350 


5 350 


6 722 


6 250 


6 250 


etc. 


etc. 


etc. 



The New York series of messages overlap the Washington series 
immediately after the latter has entered its second revolution of 
the long tape. 

Here is another instance. Let the allotment be in the propor- 
tion l£:l:l:, and let the keys be 769 and 598. The initial points 
would be as follows: 
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TABLE 7 



Washington 2 
(100 * 001 ) 

Cycles 

1 99 

2 697 

I if 

i f 

7 611 

8 440 

9 269 
10 96 

II 696 

12 525 

*13 354 

14 ife 

15 12 

16 610 

17 4 5f 

18 268 



Hoboken 1 
(355 * 001 ) 

Cycles 

1 354 

2 183 

3 12 

4 610 

3 is§ 

6 268 



7 . 97 

8 695 
~f ^9 524 

10 353 

11 182 
12 11 

13 609 

14 438 

15 267 

16 96 
4f>17 694 

e to • 



Norfolk 1 

(525 * 001) 

Cycles 

-H >1 524 

2 353 

3 182 

4 11 

5 609 

6 438 

7 267 

8 96 
•+H>9 694 

etc. 



New York 1 

(695 * 001 ) 
Cycles 

-H*l 694 

2 523 

3 352 

4 l 8 l 
etc. 



?°g 

26 438 

27 267 

28 96 



Here the Hoboken series vould make a single overlap with the 
Washington series beginning with cycle 354; a three-fold overlap 
would be produced with the Norfolk series when cycle 524 vould be 
reached; and when cycle 694 would be reached the New York series 
would join and make a four-fold overlap. 

Another case where overlaps would be produced legitimately 
in an equal allotment is as follows: Let us assume two keys 917 

and 723. Equal allotments of the long tape vould give the follow- 
ing initial points: 
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TABLE 8 



Washington 1 
(100 * 001 ) 



Hoboken 1 
(329 * 001) 



Norfolk 1 
(558 * 001) 



New York 1 

(787 * 001) 



Cycles 



Cycles 



Cycles Cycles 




1 786 
etc 



Here we would have a three -fold overlap; the Hoboken and 
Washington series would first overlap, then the Norfolk series 
would join in. 

Take the case of the lengths of tapes Involved in these test 
messages. Let us assume an allotment on the basis of 3 ! 1 J 1 : » The 
beginning points and the cycles for the four stations are as follows 
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TABLE 9 



Washington 1 
(126 * 001 ) 

Cyoles 



Hoboken 1 
(519 * O01) 

Cycles 



Norfolk 1 

(650 * 001) 

Cycles 





New York 1 

(781 * 001) 

Cycles 

1 780. 
etc. 



The Norfolk series would overlap the Washington series when 
the latter enters cycle 649. 

3uch cases are not at all merely theoretical instances, but 
would be bound to happen. The solution of a case Involving a single 
overlap, even for a short distance is very easy. To demonstrate, 
let us assume that the New York series of messages had begun with 
the key Indicators 713 * 001 instead of 713 * 001 In Norfolk 9- ‘A 
brief trial of^ possible beginnings for New York 1 would have 
resulted In yielding the excellent plain text shown below, when the 
address TRANSF0RTATI0N3SERVICE had been assumed. 



- 41 - 




REF ID : A5 1 6 91 3 









New York 1 



Long key loci 
Short key loci 
Cipher 

Assumed plain text 



713 723 ' 733 

001 010 020 

NTEXDRMUCIZGUH6M4YNFP5 ... 
TRANSP0RTATI0N3SERVICE . . . 



Long key loci 
Short key loci 
Norfolk 9 Cipher 

Resultant plain 
Text 



713 723 '733 

001 010 020 

VBtfflR I4Z 5DZ 0K76INZIW7N 
2ASSIGNKEUT3T035SCH00L 



Cycle 712 



Cycle 712 



As has already been stated the occurrence of such overlaps is 
not due to carelessness or errors, but is a legitimate function of 
the method, vis, the introduction of a difference of more than 1 
between successive revolutions. The mathematical conditions under 
which these legitimate overlaps will be produced may be stated as 
follows : 



When, during the enciphering process in two series of messages, 
the displacement becomes equal to the initial difference between 
the cycle numbers of the starting points, the two series of mes- 
sages will begin to overlap. For example, given two series of 
messages, A and B, with the starting points 375 * 001 and 765 * 001, 
respectively, (keys 787 and 639 in length) , after 5112 letters have 
been enciphered in Series A, an overlap will be produced with 
series B. Thus: 



Series A 3erles B 

373 * 001 765 * 001 

5112 5112 

5W‘5TO‘ 

Deduct (787 x 6) and (639 x 8) 4722 5112 

765 OOl 765 * 001 

This result could have been predicted from the rule given 
above. The calculations which would show the same result theoretic- 
ally are as follows; 

Cycle difference of initial points 764 - 374 = 390 

Displacement after 8 revolutions of 
the short tape and 6 revolutions 
of the long tape, that is, 

(639 x 8) - (787 x6) 5112 -4722 s 390 

The calculations for the case in which the two key lengths 
were 787 and 669 are as follows : 

Hoboken 1 322 * 001 Cycle 321 787 x 15= 10231 

Wash. 1 126 * 001 Cycle 125 66 9 x 15= 10035 

1§6 Displacement - 19o 

In other words, given the starting points of the Hoboken and 
Washington series as 322 * 001 and 126 * 001, respectively, after 
15 revolutions of the short tape (and 13 of the long at the same 
time), the Hoboken series would begin to overlap the Washington 
series. 

Another important fact disclosed by a study of Table 2, giving 
the series of cycles produced in the test messages, is that the 
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oyoles produced as the two key tapes progress go through definite 
cycles themselves. It Is clear that from any given starting points* 
if the encipherment proceeds without interruption or error until 
the total possible number of different pairs of key letters has 
been exhausted* the two key tapes would go through every one of the 
possible cycles* in this case 787* It would be possible in such 
a case to select any number of sequent cycles for analysis* since 
every cycle would be included in the series of cycles used by the 
station. But -since the method of using the tapes by allotment is 
Intended to keep each station within certain limits as regards 
the number of cycles at its disposal* it follows that this normal 
relation does not hold* and the series of cycles used by one of 
four stations may or may not Include two or more sequent cycles. 
Since the members of the chain of cycles differ by a constant 
interval (governed by the displacement)* it is possible to select 
messages the cycles for which are separated by the "smallest 
possible interval." For example, note the Washington list in 
Table 2. In this series of messages the smallest possible interval 
between any two cycles is 7; that is, the nearest cycle to cycle 
125 is cycle 118; the nearest cycle to 764 is 757, or 7 removed, 
etc. The smallest possible interval is a function of two factors: 
(l) the displacement and (2) the allotment. The smallest possible 
Interval is really determined by the least possible displacement 
within the limits set by the allotment as the encipherment con- 
tinues. This* we may explain as follows: 

Given 001 * 001 as the starting point* after 787 letters 
have been enciphered* the long key is at 001* the short key at 
/T00l + 787) - 6397 - 149. The displacement of the short key is 
therefore 149 - 001 — 148. After 7&7 more letters have been en- 
ciphered. the long tape is again at 001* the short tape at 
/tl49*787) “ 8397 * 297. The displacement of the short tape is 
therefore 297 - u01«296. Continuing this calculation, let us 
find the relative positions of the two tapes at the end of a few 
more revolutions. 



Displacement a 



Relative positions at 


end 


of 


2nd 


rev. 


Of 


long 


tape 


001 


* 


297 


296 


it n it 


n 


n 


3rd 


n 


tt 


n 


Vt 


001 


« 


445 


444 


n it n 


n 


n 


4th 


n 


n 


n 


tt 


001 


* 


593 


592 


tt n n 


n 


n 


5th 


tt 


n 


n 


1? 


001 


tt 




640 = 101 



Since the short key is only 639 letters in length, then locus 
74l Is the same as locus 102. Therefore the displacement after 
the 5th revolution of the long tape is 101 letters. How the 
successive displacements as determined above may be found by 
adding 148 successively and making proper deduction for the length 
of the short key. Let us ffee what the displacement is after a 
few more revolutions. 
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Revolutions 


of Long Key 


Displacement 


1 


148 


2 


296 


3 


444 


4 


592 


5 


101 


6 


249 


l 


III 


9 


54 


10 


202 


11 


350 


12 


498 


13 


7 


As a check on this calculation, note the following: 


787 


639 


25 S 


16 

385? 


787 

10231 


639 

1522? 



Displacement s 10231 - 10224 

That is, after 13 revolutions of the long key tape, during 
which the short tape has made 16 revolutions, the displacement of 
the short tape is 7* may say* therefore, that with the two key 
lengths given, viz, 787 and 639* after approximately 10250 letters 
have been enciphered, the cycle in which the message will be pro- 
ceeding at the time will be 7 removed from the Initial cycle. If 
the amount of traffic for any station reaches or exceeds this num- 
ber of letters, it becomes possible to select messages, all emanating 
from the same station, the cycles for which are only 7 intervals 
apart. This is actually the case In the series of test messages. 

If only one station were concerned, when the long tape would have 
made 639 complete revolutions, the short tape would have made 787 
complete revolutions, the displacement would be 0 , and every pos- 
sible cycle would have been represented. 



It is clear, therefore, that by alloting a definite number of 
cycles to each station, the smallest possible interval between any 
of its cycles is a function of the least possible displacement and 
the number of cycles which has been allotted to the station. With 
certain lengths the least possible displacement may become unity 
within the limits of the allotment of a station, and thus sequent 
cycles for messages from the same station become possible as a 
legitimate function of the system. For example, the two key 
lengths 811 and 753 yield the list of cycles given in Table 3* 

The list of the Washington series shows that the smallest possible 
Interval is 1; for example, we have cycle 125 at the start, and 
cycle 124 as the fifteenth cycle in the series. The following 
list gives the series of displacements for these two key lenths. 
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Revolutions 

of Long Tape Displacement 



1 


58 


2 


116 


? 


174 


4 


232 


5 


290 


6 


348 


7 


4o6 


6 


464 


9 


522 


10 


580 


11 


638 


12 


696 


13 


75* 



That is, after 13 revolutions of the long tape the net dis- 
placement would be 1, and the cycle upon which the message would 
then be about to enter would be directly sequent with the initial 
cycle. After 26 revolutions of the long tape, there would be 
three sequent cycles, and the series of messages would then run 
along in three sequent cycles. 

It vould be very easy to find a great many cases where the 
least possible displacement within the allotment limits is 2, 3 , 4, 
or 5 intervals. In another section of this Addendum we shall show 
how the possession of three sequent cycles is no longer absolutely 
essential before a solution can be achieved. Cases where the 
cycles are separated by the same interval greater than 1 or by 
different intervals (within certain limits; are susceptible of 
solution. 

3. METHODS FOR EXPEDITING THE TRIALS NECESSARY TO MAKE THE 
INITIAL BREAK IN THE DECIPHERMENT 

It is quite true that there are difficulties in making the 
first break, but these are by no means so great as would seem. 

It is necessary, before the decipherer can make the first 
break, that he find the correct plain text at the correct loci for 
two cycles. He may have the correct plain text for both cycles, 
but unless he applies it at the correct loci, all his efforts are 
of no avail. 

Non in the original explanation it was shown how the correct- 
ness of the assumptions of plain text for two cycles, hereafter 
to be designated as the "Experimental Cycles," was tested on the 
third, hereafter to be designated as tbs "Confirmative Cycle." 

This step necessitates the reconstruction of the long and short 
keys for the points where the plain text is assumed in the two 
experimental cycles and testing the reconstructed keys upon the 
third or confirmative cycle, at the proper loci. This process Is 
very laborious and time-consuming, and where a great number of 
trials must be made, the recovery of the individual key letters 
by the process Illustrated In Plate 1, Fig. 7 of the original 
paper is out of the question, unless a very large force of opera- 
tors is at hand. 

However, It Is possible to reduce the process to such simple 
terms that a single operator can make as many as two thousand 
trials in three to four hours. 
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The easiest vay to explain the process 13 to discuss the 
actual example afforded by the following three sequent cycles, 
with messages beginning at the points indicated by the stars and 
bars, as was the case with Norfolk 10 and Hoboken 20. 

Upper key loci 186 196 

Lover key loci 260 270 

raw YORK 2 ... 6 XTSQWQZKWCMCPWIDY 3 GD 3 A . . . Cycle -74 

* 

Upper key loci 11 186 196 

Lover key loci 261 271 

NGRPOXX 10 ...II3XH7GMERHP3QSKI3MCZVCTR ... Cycle -75 

Upper key loci I|l86 196 

Lover key loci 262 272 

HOBOKEN 20 ... || 3CTFJIXm3F4PKQ5LD ... Cycle -76 

In this case it is necessary to assume beginnings for Norfolk 
10 and Hoboken 20, the experimental cycles, then test the assump- 
tions upon New York 2, the confirmative cycle. 

This testing may be done through the agency of reconstructed 
keys, but it Is patent that the keys so reconstructed are of value 
not In themselves, but only insofar as they do or do not yield 
good plain text for Hew York 2. We may, therefore, omit the step 
of reconstructing the keys, If ve can test whatever assumptions 
are made with respect to the experimental cycles dlrecfcly on the 
confirmative cycle without their intermediacy,, and thus save a 
greet" deal of time and labor ^ 

In order to understand the method, it will be necessary to 
consider the relations existing between certain sets of letters In 
the long and short keys in three sequent cycles. In the subsequent 
discussion, for the sake of clearness, the long and the 3hort keys 
will be designated as the upper and the lower keys, respectively. 

Upper key ....ARQNV.... 

Lower key . . ». ZXTP0RN . . 

Plain text . . . . I N G 3 T . . . . 

Cipher . . . . H 6 X V P . . . . 

Upper key ARQNV . . . . 

Lower key X T P 0 R N . . . 

Plain text COMMA. . . « 

Cipher T Z X 4 Q . . * . 

* 

Upper key ARQNV. « . . 

Lower key T P 0 R N . . . . 

Plain text A D J U T . « . . 

Cipher T Y J B 2 . . . . 

Note that in Cycle 1 the plain text letter G is enciphered 
by the conjunction of the pair of key letters Q and T; in Cycle 3, 
the plain text letter D enciphered by the conjunction of the pair 
of key letters R and P. Now these two pairs of letters, viz, Q, 

T, and R, P form a single set of letters which encipher two adjacent 
letters of the plain text In Cycle 2, in criss-cross fashion. That 
is, in the second cycle, Q of the upper key in the first cycle 
unites with P of the lower key in third cycle; while T of the lower 
key in the first cycle unites with R of the upper key in the third 
cycle. Now the nature of the enciphering square, being completely 
symmetrical, is that no matter in what manner the letters of a 
set are united, the final or resultant letter is the same. For 



CYCLE 1 



CYCLE 2 



CYCLE 3 
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example, taking the four letters Q, T, R, and P, no matter how 
these letters come Into juxtaposition or In what order they are 
taken, the result of the summation of the four of them will be ”6" 
The result of these relations is that the second or middle cycle 
in any three sequent cycles represents a series of sets of letters 
which form a symmetrical or balanced system with certain sets of 
letters in the upper and lower cycles. It is analogous to the 
manner in which the two extremes in a proportion balance the two 
means. Such a set of letters will be designated hereafter as a 
"Balanced Set. " This balanced relation holds true not only for 
the key letters; it holds also for the correct plain text letters 
with their respective cipher letters , because in every case the ~~ 
plain text with its cipher letter is balanced or is symmetrical ^ 
with the two key letters involved. For example, the resultant of 
Q and T, viz, U, coincides with the resultant of G and X, viz, U. 
Therefore, the balanced or symmetrical relation existing between 
the key letters in the three sequent cycles, as pointed out above, 
exists also between the plain text and respective cipher letters 
involved. 

Just as in the case of proportion (in mathematics) one can 
determine the unknown mean or the unknown extreme from the given 
relations between the three known quantities, so one can determine 
from these relations, without the intermediacy of the key letters, 
the unknown plain-text letter in the fourth set, assuming the 
correct plain-text letters in the proper loci in the other three 
sets. When the correct assumptions are made for the experimental 
cycles, therefore, the correct plain text must result in the con- 
firmative cycle; the key letters can be reconstructed afterwards. 

Let us apply the obvious steps to the example above, giving 
only the cipher letters firsts 

CYCLE 1 Conf ir^tlvemCycle 



CYCLE 2 Experimental Cycle 



CYCLE 3 Experimental Cycle 

In the following explanation we shall indicate by the Greek 
letter Sigma (£) that the summation of the series of letters is 
to be taken. Thus: 



H 



6 



T 2 
T 



X V P 
X 4 Q 



Y 3 2 2 



Base 







The resultant series of letters B Q K 4 ... , which we have 
termed the BASE, forms the framework upon which the assumptions 
are made and the results noted. Let us assume that the message 
in one of the experimental cycles, viz. Cycle 2 begins COMMANDING, 
and then let us try all other possible beginnings for the other 
experimental cycle, viz. Cycle 3* in conjunction with it. First, 
it is necessary to "add" the letters of COMMANDING to the base, 
in the manner shown below, which gives the resultant of the first 
assumption, or, as we shall term it merely, the FIRST RESULTANT, 
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Base 

Assumed plain text 
for one experimental 
cycle 2 




Q 

M 



K 4 
M A 



FIRST RESULTANT 





(K 




i 



(4 

(m 

(A 

Q 



Ve are ready nov to try in conjunction vith the first resultant 
all possible beginnings for the other experimental cycle (Cycle 3)* 
Let us assume that this message also begins with COI^IANDING and 
find the second resultant. If the plain text assumed for both 
experimental cycles is correct, and in the correct loci, then the 
second resultant must yield intelligible plain text. 



FIRST RESULTANT 




K 


¥ 


K 


Q 


Assumed plain text for 
other experimental cycle 


3 ! — 


0 


M 


M 










SECOND RESULTANT 




E 


J 


W 


J 


This gives E J W J as the second resultant, or the plain text of 
the confirmative cycle (Cycle 1) , and we realize at once that one 
or both of our assumptions for the experimental cycles are incor- 
rect. Let us retain COMMANDING as the beginning of Cycle 2, and 
assume THE3 as the plain-text beginning of Cycle 3* instead of 
COMMANDING. The results are as follows: 


FIRST RESULTANT 




K 


w 


K 


Q 


Assumed plain text 
other experimental 


for 

cycle 


] L_ 


H 


E 


_2 










SECOND RESULTANT 




5 


U 


C 


V 


This, too, is clearly Incorrect. 
Of ADJUTANT: 


Thus we proceed until 


the trial 


FIRST RESULTANT 




K 


W 


K 


Q 


Assumed plain text 
other experimental 


for 

cycle 


] A 


D 


J 


JJ 










SECOND RESULTANT 




N 


G 


3 


T 



Here is a good possibility, and we proceed at once to add to it. 

Now all these trials can be made very rapidly by the use of 
certain sliding alphabets. These are prepared by cutting apart 
the col umn s of the cipher square, accompanying each alphabet by 
the straight alphabet including the "functions,” and arranging 
the letters as shown below, where only the first five and last 
five pairs of the A, B, and C alphabets are given, (Fig. 20). 
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Taking the sliding alphabets indicated by the first resultant, 
viz, K, W, K, and Q alphabets, ve slide them in such a manner as 
to align the letters of the assumed plain text, using the upper 
(normal sequence) member of each pair of letters for this, where- 
upon the resultant plain text for Cycle 1 (the second resultant, 
or the text of the confirmative cycle) appears on a line made up 
of the other (mixed sequence) member of each set of letters com- 
posing the pairs. Thus, the trial of the first four letters, 

ADJU, of the assumed plain-text beginning for the one message, would 
place the sliding alphabets in the position shown in Pig. 21, 
wherein the four letters of the resultant plain text for the other 
message is immediately apparent: H G J T, Thus, by sliding the 
alphabets, all the possible beginnings for Cycle 3 are tested with 
the assumed beginning, COMMANDING, for Cycle 2 . If no good results 
are obtained, then one assumes some other beginning for Cycle 2 
and goes through the same steps again. If no errors have been 
made in calculations, when the correct beginnings have been assumed 
in the correct loci of the experimental cycles, the correct plain 
text must appear in the confirmative cycle. 

While it may not be apparent, it is nevertheless true that 
this process viewed in its proper light reduces the three sequent 
cycles to the ierms of an ^overlap . ^ When an overlap occurs, it 
is necessary to assume the correct plain text in the correct locus 
for one message, whereupon the correct plain text for the other 
message appears. In this method, it is necessary to assume the 
correct plain text in two loci. 



Let us go through the solution of the test messages, as it 
actually was achieved. The three messages involved are New York 
2, Norfolk 10, and Hoboken 20, of which the last two mentioned 
are the experimental cyclesj the first, the confirmative cycle. 
This is one of the two excellent points of attack referred to on 
page 27. The steps are summarized below: 



Upper key loci 
Lover key loci 
NEW YORK 2 

Upper key loci 
Lover key loci 
NORFOLK 10 

Upper key loci 
Lover key loci 
HOBOKEN 20 



186 196 

260 270 

... 6XTSQWQZKWCMCPWIDY3GD3A ... Cycle -7^ (Confirmative) 




186 196 

261 271 

SXH7GMERHP3Q8NI3MCZVCTR ... Cycle -75 (Experimental) 



186 196 

262 272 

JCTF JIXXLK3F 4PXQ5LD 



Cycle -76 (Experimental) 



WQZKWCMC .,0 
GMERHP3Qo . c 
MERHP3QS . . . 

3CTFJIXX . . . 

Base Z 3 ft ' M T T §"IT B T ~ 

Since In Norfolk 10 the first letter which enters Into the 
balanced relations discussed above Is G, we must place the letters 
of whatever ve assume for that message in their proper loci, viz, 
the 5 th letter of the assumed beginning must go under its cipher 
letter G; the 6 th, under M; etc. Assuming ADJUTANT3GENERAL for 
the beginning of Norfolk 10, ve must add the proper letters as 
shovn below: 
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ABC 

AAA 
7 G F 

B B B 

0 7 Q 

C C C 

F Q 7 

D D D 

Bill 

E E E 

2 0 K 



5 3 5 

U X R 

4 4 4 

J Z 1 

5 5 5 

MI Z 

6 6 6 

0 2 Y 

7 7 7 

ABC 



f A D 1 " 
In g 



FIG. 20 



FIG. 21 
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Base 

Assumed plain text’ 
for Norfolk 10 ( 

experimental cycle, 

Base 

Assumed plain text] 
for Norfolk 10 



ZJRMGG'LE . 



TANT3GENE 



• Z3RMGGLE 
TANT3GEN 



ANT 



GENE 



1st resultant 2JP43E5N. 

Let us now set up the sliding alphabets 2, J, P, 4, 3, E, 
5, and N, and then try out the various possible beginnings for 
Hoboken 20, the other experimental cycle. When TRANSPORTATION 
is tried, the results are as shown in Fig. 22. 



H 

m 

BY 

C2 

AM ps 
BI EF 
CZ ps 
DP GP 
EV HO 
FL ir 
GS jp 
HJ KA 
IB LV 
JH MT 
KT N7 
LF OH 
MA pg 
NW Q6 

_g g- BI 

TD sd 
Q4 TM 
RY UJ 
SG VL 
TK W5 
HO XZ 



TRANSPOR 

LEY3EQOI 



'f ~ 

4Q 7 n 
57 



FIG. 22 
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From the sequence LE Y 5 E Q the word EQUIPMENT soon made 
Itself apparent. A few more letters (PMENT3) were tried out to 
make sure, and very soon, since these yielded good plain text in 
the other two cycles, it was clear that the cipher system had 
indeed been solved and the challenge successfully met. 

The keys were then reconstructed, additional messages being 
utilized to expedite the process; they were then tested on new 
messages and found to be correct. 

It should be clear that this method of using sliding alpha- 
bets can be applied to a case where the beginning points of two 
messages are not close together. In such a case, given one of 
the experimental cycles as Involving a beginning of a message, 
possible beginnings are assumed for it and then the sliding alpha- 
bets are brought into play by assuming high frequency polygraphs 
for the interior of the other experimental cycle and testing the 
results on the third confirmative or third cycle. 



In the preceding method it was necessary to assume plain text 
for tvo cycles and test the assumptions on the third. We shall 
now show how plain text may be assumed for only one cycle and the 
correctness of the assumption tested on the other two cycles 
simultaneously. We shall use for examples New York 2, Norfolk 9# 
and Hoboken 19* 



NEW YORK 2 
Cycle -74 



NORFOLK. 9 
Cycle -75 



HOBOKEN 19 
Cycle -76 



Upper key loci 
Lover key loci 
Cipher 

Upper key loci 
Lover key loci 
Cipher 

Upper key loci 
Lower key loci 
Cipher 



. 179 

* 255 

.. TNPWBQFVLRG6XT 



.. 2 E P Q 



17 ?! 

254 

U 2 3 U N j 



..WDPZMCZWHEA33 



The base is as follows: 



Base 



P W B Q F V L 
P Q U 2 3 U N 
E P Q U 2 3 0 
D P Z M C Z W 



Let us assume for the plain text of Norfolk 9 the likely end- 
ing* 30FFICER, and find the first resultant. In order to apply 
the assumed text to the base in this case, it will be necessary to 
find what we have termed the MEAN VALUES of the assumed text. 

These are simply the sums of the successive letters of the plain 
text taken in pairs. They have been termed mean values because 
they constitute the means in our balanced sets or proportions. 

For example, the mean values of the word 30FFICER are as 
follows : 



Plain text 
Mean values 



\ A A A A. A A / 

M Y 7 J 4 K J 
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The mean values are nov applied to the base, yielding the 
first resultant as follows: 

Base O 0 C SO 

Mean values M Y 7 J 4 S J 

First resultant HTo S "F A E 

The sliding alphabets are now brought into play, and an attempt 
is made to produce intelligible text on two lines made up of a 
pair of letters on each alphabet. Note the following 3et up in 
Fig. 23 and the plain text given by the lines indicated. 

This method of making an initial break into three sequent 
cycles makes it very practicable to work with the case where the 
beginning points of two messages are not close together. Given 
one of the experimental cycles as involving the beginning of a 
message, assumptions of probable addresses are made, and then the 
sliding alphabets are brought into play by assuming for the 
interior of the other experimental cycle high frequency polygraphs 
such as 44235353, 6M533> 6N53, 3THE3, 30F3THE3, etc. The results 
of the assumptions are tested on the confirmative cycle. 

* * * * 

The relations existing between the experimental and the con- 
firmative cycles may assume three general cases : 

1. the two experimental cycles may be the first and 
second of three sequent cycles, whereupon the confirmative cycle 
is the third of the series; 

2. the two experimental cycles may be the second and 
third of three sequent cycles, whereupon the confirmative cycle 
is the first of the series; 

3. the two experimental cycles may be the first and 
third of three sequent cycles, whereupon the confirmative cycle 
is the second or middle one of the series. 

To continue the analogy with the relations in a proportion, 
in the first case, the upper experimental cycle constitutes one 
of the extremes; the second experimental cycle constitutes the 
two means; and the confirmative cycle constitutes the other 
extreme. The second case is the same as the first. In the third 
case the experimental cycles constitute the extremes, the confirm- 
ative, the two means. The third case is therefore considerably 
different from the first two in that in the first two cases we 
have given (or rather assumed) one extreme and both means, leaving 
only one unknown, viz, the other extreme, to be determined; whereas 
fin this case we have given (or rather assumed) both extremes and 
/still have two unknowns, viz, both means, to be determined. Were 
It the case that one and only one isolated balanced set were con- 
cerned in Case 3» there would be no way of finding both means; but 
the fact is that a series of balanced sets is involved, and that 
fact coupled with the fact that the two unknown means of each 
balanced set combine with the adjacent pair of unknown means to 
form intelligible text enables us to select from thirty-two pairs 
of unknowns for each balanced set the pair which, when united 
with one of thirty-two pairs for its neighboring balanced set 
forms intelligible text; and this process continued results in 
the production of plain text for the confirmative cycle. Exactly 
what is meant will become clearer in an example. We shall give 
the correct plain text for all three cycles first, and then take 
up the cipher letters alone. 
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H 

m 

BP 

CG 

DX 

BY 

FB 

GC 

H7 

IL 

J5 

S6 

LI 

M4 

NO 

ON Z 
P2 XL 
QA BA 
RV C5 



UW PM 
VR GJ 
WU HS 
XD IQ 
YE JG 
ZS XV 
2P LA 
5T MP 
4M NX 
5J OD 
6K PU 
7H QI 



0 

JF 

BE 
OP 
DZ 
SB 
FY 
G2 
HN 
I V 
JW 
KQ 

1R 

M3 

NH 

07 

PO 

QK 

RL S 

sx aT 
T4 BM 
U5 CJ 
VI DN 
WJ S3 
X3 P4 
YP G5 
ZD HZ 
2G IA 
3M JC 
4T KR 
59 JA 

§£ ® 
70 HD 
OX 
PV 
QL 
RX 
S7 
TY 
U2 
V6 
WP 
XO 
YT 
ZH 
2U 
3E 
4P 
5G 
6V 
7S 



P 

xtr 

BH 

CA A 
D3 

EH BG 
P7 CP 
GQ IB 
HB E2 
IJ PC 
JI GB 
X2 HQ E 
L5 IS X 2 
MZ J4 BO 
HE ffl CK 
OY LZ D4 
P6 M5 E7 
QG NX FN 
RU 06 06 

34 PY HY 
TX QH ru 
DR RD JR 
W SI XC 
W TV LW 
XT D3 MX 
YO VX UP 
ZM WT OB 
2K XV PQ 
3D YP QP 

^ (^) (||) 
7P 4J UI 
5M V5 
60 WL 
7A XM 



(T E 6 M 
(3 T A B 



FIG, 23 
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MESSAGES 



CYCLE 1 


Upper key 
Lower key 
Plain text 
Cipher 


| 3 Q T P H V R 
OBNTOXABD 
Z 0 N E 3 F I 
N P T U T M X 


CYCLE 2 

j 


Upper key 
Lower key 
Plain text 
Cipher 


SQTPHVR 
BNTOKABD 
R T M E N T 3 
P JHEEFQ 


CYCLE 3 

1 


Upper key 
Lover key 
Plain text 
Cipher 

* * 


*TPHVR 

0 K A B D 
CHIEF 

1 F D I C 

* # * * 


Cycle 1 
Cycle 2 
Cycle 3 


4 

f Experimental) : 1 

(Confirmative] : 
(Experimental) : 


In P T U T M K 

P JHKKFQ 
ill F D I C 



Base: 

Assumed plain text for Cycle 3: 

First resultant: 



nin , 

K K P Q . 
MKKP , 
IPDI , 

mnrr 

CHIEF 



To the first resultant let us add Z0NE3FINANCE , the assumed 
plain text of the other experimental cycle, viz. Cycle 1. The 
first letter which enters Into the relations is the E of ZONE. 

First resultant: M D Z L „ <> . 

Assumed plain text for Cycle It ET 3 F* I . . . 

Second resultant: X F M H . . * 

Let us consider now the first three balanced sets in our rela- 
tions : 



CYCLE 1 



CYCLE 2 



CYCLE 3 



Cipher 
Plain text 

Cipher 
Plain text 



Cipher 
Plain text 



UTH 
E 3 F 

HKEPQ 
P P P P P 

1 2 3 4 5 

X F M H' 

I F D 
CHI 



EXPERIMENTAL CYCLE 



CONFIRMATIVE CYCLE 



EXPERIMENTAL CYCLE 



The letters of the second resultant are shown In their proper 
places in Cycle 2. The first letter of the series, viz, X is the 
sum of two plain text letters represented by P^ and P 2 ; the second 

letter of the series, viz, P, is the sum of two plain text letters 
represented by P 2 and Pj. If, therefore, we assume Pj^ to have any 
value, say A, ve can derive, successively, the values of P g , P 3 , Pi,, 
*5 ... . Thus : J 
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If P 1 = A, then P 2 S A + X *V; PjssVtF&Wj -W tK^S; K+ H:=. 6 

Upon this assunqption the plain text of the confirmative cycle 
would read A 7 V K 6, which is obviously incorrect. 

We could proceed to find the value of this series based upon 
various assumed initial values of taking the letters of the 
alphabet in succession. Let us see what ve get when we asstime 
*1 a M. 



If P 1 s;M, then P 2 » M4X S E; Pj-E+F-N; F 4 «N+ Mr T; PjsT+KsJ 



Here ve have excellent plain text, M E 5 T 

* We may eliminate all the trials necessary to find the value 
of Pi by the use of sliding alphabets. Assuming Pi to have the 
value of 7# the value of Pg, Pj ... is found in the following 
manner, starting with the second resultant X P M H derived as shown 
on page 55 : 

Second resultant X P M H 

1 7 X T N or 

Third resultant X f fT ST 



Setting up the letters indicated in the third resultant on 
the ordinary sliding alphabets of the cipher square, we have what 
is shown in Pig. 24. 



Here the correct generatrix becomes visible 
almost Instantly by giving intelligible text. 

The choice of 7 as the basic or assumed value 
of P means nothing in itself, for any other of 
the thirty-two letters of the alphabet might be 
used as a base, with the same results. For 
example, supposing, as before, we start with a 
as a base, we get the third resultant shown 
below : 



Second resultant 
Third resultant A V W K 6 

Setting these alphabets up, we find that the 
generatrices are exactly the same as those produced 
above, but they are in a different order, as shown 
in Pig. 25 . 

The mechanics of the process should be clear. 
E-ich of the letters of the second resultaht, X, P, 
M, H, ... represents the union of a pair of means 
in the proportions mentioned on page 52. The 
pair of means of adjacent proportions have one 
member in common. This fact, together with the 
fact that the succession of means must form 



PIC. 24 - 56 - 




7 X T H 0 
tVVXG 

B 3 D YE 
C W V 2 P 
DEBSZ 
EHZFB 
F T X E Y 
G TJ H P 2 
H D 3 0 N 
I 6 P R V 
J P 6 U W 
K L 5 A Q 




0 3 4 H 7 
P J I 0 C 
Q R U 6 K 
RQOIL 
80YDX 
T F 7 M 4 
U G Q J 5 

V A C L X 
W C A 5 J 
X 7 F Z S 

Y 4 3 B P 
Z N E X D 

2 5 L C G 

3 B H 4 M 

4 Y 0 3 T 

5 2 K W U 

6 I J 0. A 

7"* ff'fTT 



P 1 p 2 p 3 p 4 p < 



X T B 
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intelligible text, makes the process capable of yielding the 
desired results. 



A V V X 6 
T XfN V 
G U R P 2 
F T X E Y 
R Q G I L 

2 5 LOG 
C W V 2 P 
B 5 D Y E 
Q R U 6 K 
S 0 Y D X 

4 Y 0 3 T 
H Z M T H 
Z N E X D 

5 2 K W U 
K L 5 A Q 

6 I J Q A 

Y 4 S B F 
H D 3 0 N 
D E B S Z 
I 6 P R V 

W C A 5 J 

3 B H 4 M 
X 7 P Z S 
T F 7 M A 

V A 0 L I 
P J I G C 
L K 2 V R 
BHZFB 
U G Q J 5 
J P 6 U W 

OTO 

0 S 41 7 



FIG. 25 



****** 



SLIDING OF ASSUMED PLAIN TEXT 
TO FIND ITS CORRECT LOCUS 

It has been stated above that not only must the correct plain 
texts be assumed in two different cycles but also these texts 
must, of course, be assumed in the correct loci in those cycles. 

Proceeding upon the theory that messages emanating from 
Norfolk, Nev York, and Hoboken are more likely to go to Washington 
than to other points. It seemed feasible to assume as the plain 
text of the beginnings of certain messages WAR3DEPARTMENT2WASHINGT0N 
3DC3# the problem then being to find the correct loci of the phrase 
in each of tvo cycles. An example will serve to make the process 
clear. Note the three sequent cycles below, in which WAR3DEPART 
MENT2WASHINGT0N3DC3 is assumed to occur in experimental cycles 2 
and 3 near the beginning of the messages. 
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Upper key loci 192 202 212 

Lover key loci 266 276 286 

H.Y. 2 (Cycle -7*) . . .6XT3QWftZKWCMCFWIDY3GD3A6J!OZE6EXTD4FZRLR. 

Upper key loci t 192 202 212 

Lover key loci 267 277 28 ? 

NCR. 10 (Cycle -75) > SXH7GMKHHP3Q3NI3MCZVCTHV0U0HVNUS4T64AAZY . 



Upper key loci 
Lover key loci 
HOB. 20 (Cycle -76) 



192 202 212 

268 278 288 

5(^JIXXLK5P4PKQ3LDYEQIJGKI 3 VGV0L34VVV. . . Exp. 



It is possible, of course, to begin by placing WAR3EBPARTMENT2 
WASHINGTON at any of the likely loci of Cycles -75 and - 76 , re- 
construct the keys and try then on Cycle -74. If no good text 
results, the phrase would be moved one space to the left or right 
in one of the cycles, say the second, and the keys reconstructed 
again. This process vould be continued until the phrase had been 
shifted to all possible loci in Cycle -76 (within the section under 
examination) , keeping the locus of the phrase stationary In Cycle 
-75* If no good results were obtained, then the phrase in Cycle 
-75 vould be shifted one space to the right or left and the whole 
process of shifting the same phrase in Cycle -76 would be gone 
through again. In a section of 25 letters in length with a phrase 
25 letters in length also, 50 x 50 or 2500 trials would be neces- 
sary to exhaust every possibility. The labor and time of making 
such a test- being very great, a short cut was devised, which 
reduces the work enormously. Sliding alphabets of a special kind 
are used. They consist of a simple rearrangement of the horizontal 
lines of the cipher square, according to the order of the letters 
of the phrase to be tested. If the phrase be WAR3DEPARTMENT2 
WASHINGTON, then the W row of the cipher square is written first, 
followed by the A row, then by the R row, etc., until all the rows 
have been arranged accordingly. The modified cipher square then 
has the following form: 



WAR3EBPARTMENT2WA3HINGT0N 



ABCPgFOH I J X L 



R 2 C B 
A J U T 
P S D V 
7 4 5 V 

4 7 N 6 

5 ft 6 U 
R 2 C B 
A J U T 
B Z X R 
Y X Z I 

4 7 N 6 

5 P E P 
B Z X R 
J A X 0 
G L V D 
R 2 C B 

N 5 4 5 

X Y B C 
X U J M 
S P E P 
W 6 ft 7 
B Z X R 
Z B Y 2 
S P E P 



ft S 4 N Z 

V N E S 0 
T 2 X J P 
X X 2 I 6 
YURCV 
2 T X B 5 
ft S 4 H 
VIES 0 
5 P 6 5 2 

4 G ft W C 

Y U R C W 
0 R U A V 

5 P 6 5 2 
P 3 D P T 

moo 
ft S 4 N Z 
Z A C R Q 
7 L 5 6 I 
L7FDH 
0 R U A V 
C M Z Y 4 
5 P 6 5 2 
N V W (ft R 
OREM 



OO 

TT7 
5 K 6 

P I L 

0 4 M 

Y S Z 
X P B 
R G C 
5 K 6 
P I L 
N M 4 
7 T 3 
X P B 
T 7 H 
N M 4 

V C G 
K 5 J 
5 X 6 
B D X 
4 0 N 
G R V 
T' 7 H 

1 P 2 
N M 4 
3 H 7 
T 7 H 



PftRST 

T 3 TTT 

YHDIV 
M X 7 K G 
LVCEH 
5 V A N B 
ftp JJZ 
7 E M W I 
Y H D I W 
M X 7 K G 
IEGYT 
R JPBI 
ftP J 3 Z 
G 6 I D M 

1 U G Y 7 
H Y 4 U L 
S 3 B P A 
YHDIV 
W L K 7 Y 

2 A V Z 3 
T Z N A P 
G 6 I D M 

N P T 5 R 
I 0 G Y 7 
C X L X 4 
G 6 I D M 



U V W 

■TFT 

3 X T 
P H B 
AGQ 
C Q G 
I 5 L 
Z 4 S 
3 X T 
P H B 
Q C A 
6 2 X 

1 5 L 
J L 5 
ft C A 
S M Z 
H P 7 
3 X T 

2 6 P 
VRE 
E 0 Y 
J L 5 
X 3 D 
ftC A 
5 I J 
J L 5 



X Y Z 2 3 4 5 6 



VPLBE 
ft 5 6 4 C 
B Z Y I 7 
H M 0 J F 
HHTAS 
JAEHL 

V P L E U 
ft 56 4 C 
F S E L H 
E D P V 0 
HHTAS 
Z B X C 4 
P S E L H 

5 ft W 7 I 
C I 2 Z ft 

V P L E U 
0 T H U E 
D E S P T 

6 W ft 3 2 
Z B X C 4 
DKJOV 
F S E L H 
5 F D G M 
Z B X C 4 



J M 0 A 
2 Y Z R 
E 6 5 3 
E P L D 
D V G E 
V D F P 
J M 0 A 

2 Y Z R 
0 X J T 
H A U M 
D V G E 

3 V Q N 
0 X J T 
R X B 2 
6 N 4 W 
JXOA 
F G V S 
M J X H 
C B X I 
3 W ft N 
L S E G 
0 X J T 
T U A 0 
3 V ft N 



FIG. 26 
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n 



The columns are then cut apart, and mounted on strips in the 
fora of sliding alphabets, ready for use. The method of use, em- 
ploying the principle of balanced sets, will be illustrated in the 
case of the three cycles forming the basis of the preceding analysis. 
We shall start by assuming that the phrase WAR 3 DE PART ME NT SWASH INGT ON 
.is In locus 192 of experimental cycle - 75 > as the beginning phrase 
267 

of Norfolk 10. The base and the first resultant are derived in the 
usual manner, and are as shown below: 



NEW YORK 2 
CYCLE -74 
(CONFIRMATIVE) 



Upper key loci 192 

Lower key loci 266 

Cipher . . . 6XT3QWQZKWCMCPWIDY3GD5A6 JM5ZE6EKTD4FZRL . . 



NORFOLK 10 Upper key loci 
CYCLE -75 Lower key loci 
(EXPERIMENTAL) Cipher 

Assumed p. t. 



192 

267 

. . . 3QSNI2MCZVCTRVOUOMVNUS4T64AAZY- 
* . . WAR-JDE PARTMENT 2WA5HINGT0N - • 



HOBOKEN 20 Upper key loci 
CYCLE -76 Lower key loci 
(EXPERIMENTAL) Cipher 



192 

268 

. . .XXLX3F4PKQ5LDYEQUGEPWGV0L54WV. . 



Base 

Assumed plain 
text for NOR, 10 

First resultant 



MCPWIDY3GD3A6JM3ZE6EKTD4 
QSNIJMCZVCTRV 0U 0 MV NtU 3 4 T 6 
3QSNI3MCZVCTRV0U0MVNUS4T 
XXLK3F4PKQ5LDYEQUGEPWGV0 

L " rr?7 WTr - ru tr r o g nT 'e hi mty '%' 6 
\rTTyt~YFTrf me S t 2' vir^irxiRrrs 

AR5DEPARTMENT2WA3HINGT0. N 
m 6“4IC3720 XGrwmh4Gp4fuk 



The sliding alphabets indicated in this first resultant are 
then set up in a "staggered” manner, as shown below in Fig. 27 . 

If the hypothetical phrase In Cycle -75 is really in the locus assumed, 
and if It also Is contained anywhere within the section Included in 
Cycle - 76 , then intelligible text must appear on some generatrix 
of the set-up. 

Should It happen that the locus of the first letter of the 
phrase in both cases falls within the same column, that is under 
the same "long key" letter, the uncovered plain text for Cycle -74 
will occupy the longest generatrix; that Is it will begin with 
the second letter on the first strip (the letter immediately below 
the letter designating the alphabet; and will continue all along 
the generatrix, provided no breaks occur in the phrase VAR 3DE PART 
MENT2WASHINGT0N, as assumed. If a break should occur, for example, 
should the phrase be WAR312EPARTMENT6N53WASHINGT0N, then the un- 
covered plain text for Cycle -74 will appear on two generatrices, 
separated by four letters giving unintelligible text. 

Should the phrase in Cycle -76 begin one letter to the right 
of where it begins in Cycle -75, the plain text will appear on the 
generatrix which begins with the second letter on the second strip, 
and so on upwards until, if the phrase in Cycle -76 should begin 
under the next to the last letter of the phrase In Cycle - 75 , only 
one letter of the plain text for Cycle -74 will be given by the 
set-up, viz, the second letter on the last strip. Should the 
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AJO B C 

J 6 4 T 7 
J E V F 
2 K W 3 
N 2 6L 
SEND 
D X B C 
V 4 T H 
J E R 0 

2 6 13 
0 Q 6 4 
H R P H 
D U R I 

3 6 0 Q 
0 D D U 
ROBE 
6 4 5 T 
J 0 C 2 
F 5 M 4 
M F P V 
CD 7H 
3 Z R M 
L 6 2 4 
0 V P 

T U ■ 



JV E L 
A 4 M 
R I Z 
3 J B 
D A C 
E H 6 
PEL 
A 4 4 
R L 3 
TVB 
MAH 
E C 4 
N L G 
T 7 J 
2 Z 6 
VEX 
ADS 
S P V 
H 3 H 
I C 2 
N 0 4 ' 
G L 7 ; 
TGH 
0 C 



juu J 
|EQ2 
5 V N 
PTE 

0 X D 

Y Y V 
X 2 J 
R Q 2 
5 V 0 
P 3 H 
N 4 D 
7 Y 3 
X 0 0 
T 3 R 
N P 6 

V U J 
K Q F 
5 Z M 
B 7 C 
A L 3 
G 0 L 
T C 0 

1 3 T 
N W 3 
3 0 

T 



£]Pj 

]D Y 2 
B M N 
T L E 

V 5 D 

V Q V 
6 7 J 
N Y 2 
B M 0 
T I H 
R R D 

1 Q 3 

6 G 0 
P I R 
R H 6 
0 S J 
D Y F 
B W M 
5 2 C 
C T 3 
M G L 
PNO 

7 I T 
R C 3 

2 G 



FIGo 27 



phrase in Cycle -76 begin one letter to the left of where it begins 
in Cycle -75. the plain text will appear on the generatrix which 
begins with the third letter of the first strip and so on downwards, 
the reverse of what was set forth above. In other words, by keeping 
VAR3DEPARTMEMT2VASHINGT0N in the locus shown in Gycle -75 in the 
textual diagram above, this one set-up of the special sliding 
alphabets is equivalent to having slid the same phrase in Cycle -76 
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• ' r ^ ' 

fifty times. Examining Pig. 27 in the light of tne foregoing dis- 
cussion, no good plain text is discovered on any generatrix, nor 
do v© find even a fragment of intelligible text sufficient to justify 
further experiment with this set-up. We proceed thereupon to move 
the phrase one space to the right in Cycle -75- 

Going through the same steps as shown on page 59 , with 

the sane assumed phrase in Cycle -75 (WAR3DEPARTMENT2WASHINGT0N) 
but beginning under the letter Q instead of 3 , we have the follow- 
ing: 

Upper key loci 192 

Lover key loci 266 

H.Y. 2, Cycle -7* 6XTSCMCFWIDY3GD3A6JM3ZE6EKTD4FZR1II CONFIRMATIVE 

Upper key loci 192 

Lower key loci 267 

NORFOLK 10, Cycle -75 3QSNI3MCZVCTRV0U0MVNUS4T64AAZY EXPERIMENTAL 

VAR3BEPARTMENT2WASHINGT0N 

Upper key loci 

Lover key loci 

HQBOEKN 20, Cycle -76 

BASE 

If the second generatrix, omitting the first letter, of the 
preceding set-up of alphabets (Pig. 27 ) be united with the phrase 
WAR3DEPAR TMENT 2VA SH INGT ON , we get the same base as is indicated 
here when the phrase is moved one letter to the right in Cycle - 75 . 
Thus : 

2d Gen. of Pig. 27 
Assumed plain text 
Derived new base 

This means that once a set-up such as that of Fig, 27 is made, 
new or additional write-outs of cycles as the assumed phrase is 
slid, need not be made: the proper bases can be derived as shown 
by the foregoing example from a single write-out of cycles and 
assumed plain text. 

The sliding alphabets indicated by the foregoing derived base 
(it Is really a "first resultant") are then set up as before, and 
the various generatrices are examined with a view to finding plain 
text. The set-up given in Pig. 28 shows a generatrix containing 
intelligible text consisting of a sequence of eight letters, 

K G 3 T 0 3 S 6 . Note the generatrix which is underscored. It 
means that we have struck the correct loci of at least a part of 
our hypothetical phrase in Cycle -75 and Cycle - 76 . We can ascer- 
tain what parts are involved from the position of the plain text 
in Pig. 28. For the fact that the plain text, viz, NG3T03S6, 
begins immediately after the "letter" 2 , designating the generatrix, 
means that the hypothetical phrase in Cycle -76 begins with 
WAR3DE ... etc. The fact that this generatrix is the 16th of the 
set-up means that in Cycle -75 the hypothetical phrase begins with 
ttte^USth letter, which is the W of WASHINGTON. In other words, 
the loci of the hypothetical phrase are as shown herewith: 




(E )2 ULDXBCTVBRR475ZMMGLX5' A7 
WAR3DEPARTMRNT 2WASHINGT0 

ST 3 " S " P IT O ' OTD ? T‘ ; rf TT"$T ' mi "ro 



192 

268 

XXLK3P^PKQ5LDYEQUGEPWGV0L34WV EXPERIMENTAL 
Z30FH00WHDPJ3YX25BCHZSW0 
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Off T 
Hjj 6 B 
Pfo 6 L Q, 
OjV Q L M G 
jjj C V M Z L 
ZJQ, 6 U T Z B 3 
fU L D X B C T 
LCM5YC6B 
67ZN26LA 
YFB6QL4K 
0SCCV43L 
TL6TJ33B5 
UUL14BHA 
LC4ZYH4Z 
6H3N04G7 
E0BE3GJT 
PSHXPJ6P 
T44XU6XU 
XHGVQXHY 
EIJCZNV5 
WQ647VHD 
2UXBLB 2A 
LEHJ024J 
HTVEC475 
S 2 H Q 3 7 H 
Q 4 2 X N H 
X V 4 Y 0 
J H 7 E 
EHH 
D 4 



Pf 0 U 5 
dJs 4 c z 
hJg y e 7 m 
[ORMKPH 
Q A L 2 S A 
VP 5RLP 
T 7 Q X U 5 
X 4 7 4 C 3 

Y 5 Y E H D 

2 R M 6 0 H 
Q A I Q 3 B 

Y B R R 4 S 

3 Y d TJ H Q 

4 4 G 6 I I 

Y S I D Q P 
0 B H 0 D T 
3 J 3 4 E E 
PGYCIV 
U R W 5 2 B 
d N 2 F 4 X 
Z X T U V 3 
7XOZHF 
L 3 H 6 M B 
0 W I W 4 
CBCU 

3 Z G 



4J5": 

Jh g : 



fc e y x u 

V 4 6 T X 
Q I P 0 0 
B J V X F 
H A D G 3 
MEMWV 
J E Y D L 

V 4 X 3 X 
QLA02 
F V V Y V 
E A W D M 
MCK6X 
Z L X R F 
F 7 N G J 

5 Z M M G 
C E G F 4 

V U J 5 2 
0 P B Y H 
D 3 W A V 

6 C S D P 
Z 0 X E 2' 
U L D Y 

F G W 
3 C 



V]T 
3j7 6 
ZjP T L 
Hj2 IBM 
[U L K Q Z 
Q6EGB 
VYHiC 
T 0 3 S 6 

TTT T Z 

Y D I B 4 

2 L X A 3 
d 6 Y X B 
VEBLH 

3 F 3 3 4 

4 T D A G 

Y X Y Z J 
0 E U 7 6 
3 W P T X 
P2IPH 
U L 7 0 V 
QHZYH 
Z 3 A 5 2 
7 Q D D 4 
L X 5 A 7 
0 J Y J H 
C E X 5 

3 D D 



FIG 28. 
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NEW YORK. 2 
CYCLE -74 
(CONFIRMATIVE) 



n 

Upper key loci 
Lover key loci 
Cipher 
Plain text 






186 196 206 216 

260 270 280 290 

6XT3QWQZKWCMCPWIDY3GD3A6JM3ZE6EKTD4FZRLE 

. ..SG3T03S6.. . 



NORFOLK 10 
CYCLE- -75 
(EXPERIMENTAL) 



Upper key locii ( 
Lover key locif 
Cipher 
Plain text 



Ik 



186 196 206 *' 216 

261 271 281 291 

XH7GMERHP3QSNI3MCZVCTRV OOOMVNUS4T64AAZY 

...WASHINGTON.. . 



HOBOKEN 20 
CYCLE -76 
(EXPERIMENTAL) 



Upper key loci 
Lover key loci 
Cipher 
Plain text 



186 196 206 216 

262 272 282 292 

||3CTFJIXXLK3FAFKQ5LDYEQ,UGEPWGV0L34WV . . 
1* . . .WAR3DEPARTMENT. . 



With this as a start, the keys can be reconstructed and the 
decipherment continued. 

* * * * * 

A variation of the foregoing method makes U 3 e of special sliding 
alphabets based upon the hypothetical phrase, the presence of which 
Is suspected in both experimental cycles. These sliding alphabets 
are built exactly like those based upon the phrase WAR3DEPARTMENT2 
WASHINGTON, except that instead of using the sequent letters of this 
phrase in constructing the alphabets, the mean values of the letters 
of the assumed plain text are used. The mean values of the phrase 
under discussion are as follows: 



WAR3DEPARTMENT2WASHINGT0N3DC 
AR3DEPARTMENT2WASHINGTON3DC3 
Mean values fD ' clTT? r& ' TTrrLi 'T r^ t ft F R 4 H W F U R 

Sliding alphabets are now made by first constructing the square 
shown in Fig. 29 and then cutting the columns apart. 



fi 


A 


B 


C 


0 


E 


F 


G 


H 


I 


J 


X 


L 


M 


N 


0 


P 


4 


R 


s 


T 


U 


V 
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Y 
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2 


JL 


4 


5 


6 


n 


T 


"V 


TF 
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TT 


T 


T 


IT 


“5 


T 


"S 


5 


T 


TT 
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11 
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ir 


IT 




H 




TT 


*T 
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"S' 


T 


IS 
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“0 


K 


EJ 
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W 
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5 


V 


A 


N 


B 


c 


Q 


G 


H 


M 


0 


J 


F 


E 


P 


L 


D 


C 


F 


0. 


7 


u 


K 


A 


H 


G 


4 


S 


E 


M 


L 


2 


p 


0 


B 


3 


J 
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X 


W 


6 
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L 
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C 
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A 


N 
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Y 
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A 


3 


N 


7 


Q 
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E 
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FIG. 29 
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Then by setting up the alphabets indicated by the letters of 
the base in staggered fashion a 3 before, the successive first 
resultants will be found in successive generatrices. Note that 
the two generatrices used in the preceding discussion appear in 
the set-up in Fig. 30. 



I D L 



JLJV 

fJr u 
k]T W 7 
J5 3 H A 

1 A Q I 
E 7 L B 

2 5 F 6 
5CZDGKD 

itlZ 30FH00WH 
24A64JG372 

6K7VQDIQPW 
MH5E YYHUA 
5DGADIATQL 
GPO 5 GTL 7 IM 
3H3NNE2Z45 
U4qGXZW5JV 
66EJF7XMR4 
4FT 6 MCVIM 5 
YH7ELP5 J JM 
KNZ3ZNDM43 
5X5UTGV 5T 0 
CVMIIFXUN3 
7TXTZCS6TI 
AZJULPBTJLG 
2TJM3RRS3CI 
HT5MPPUBLA 
AVU7RH6SQD: 
7J6M44U7X3 
OQUYRHqHT 
3 J 8 2 4 Z 4 tl 

0 D B V F 6 S 
G Y S 6 U P 

1 D 7 Z R 
G N R M 
5 I tJ 



B 

jJW 

Mf2 T 
2jM 6 Q 
JL S M H 
J 2 5 Z 
H E G C 
K 3 S K 
R 6 DT 

Y B 6 A 
Q S 4 Y 
J P V 3 
0 7 K H 
C Z 3 s 
5 E C J 
K T 7 4 

V V A D 
T X 2 5 
W M H 4 
L R A J 

3 X 7 W 
W V 0 K 
T I 3 W 

4 G 0 Z 
H I G F 
4 3 I Z 
R 0 G H 
P 3 5 V 
R E Y W 
K JO 



FIGo 30 
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In the preceding example the assumptions for the plain text 
Involved the hypothetical presence of the same phrase In both 
experimental cycles. We shall now proceed to a consideration of 
the case vhere the assumed plain text is not the same for both 
experimental cycles. The procedure is basically the same as in 
the preceding case. The messages to be used for the demonstration 
are three actual messages of the series. The base has been derived 
In the usual manner, a nd to it Is applied the assumed beginning, 
TRAHSPORTATI ONJSERVICE , for Cycle >76, one of the experimental 
cycles, yielding the first resultant shovn belov: 



Upper key loci 11395 403 

Lover key loci 1469 477 

H.Y. 3 (Cycle -75) !! ZTDH7JXUFH , . , 

Upper key loci 403 

Lover key loci 478 

HOR. 10 (Cycle -75) . . . , C U 7 Q Y M K 7 H 7 P . . . 

* 

Upper key loci 403 

Lover key loci 479 

HOB. 21 (Cycle -76) GTXAQXNNUFRT. . . 

Assumed p.t. TRANSPORTATION. . . 



ZTDM7JXUPKK 

D4G7QXMK7H7 

4G7QYMK7H7F 

GTXAQXRNUFR 

Base 

Assumed p.t. for) TRANSPORTAT 

Cycle -76 ) 

1st resultant Q0P3TDGCYY0 

Since Nev York begins somevhat in advance of the locus vhere 
Hoboken 21 begins, and since It is probable that the former message 
Is going to Washington, ve assume that the phrase WAR3DEPARTMENT2 
WASHINQT0H3DC3 occurs somewhere In the vicinity of loci 395 to 425 
of the upper key. 

The special alphabets based upon the phrase WAR3 etc. are set 
up in the manner shovn belov In Fig. 31* Of course, no plain text 
can be visible as yet because the confirmative cycle in this case 
is the middle cycle, and ve must apply the principles elucidated 
on pages 53-56. 

The steps are the same for every generatrix of the set-up, 
ai^d ve will take only the correct generatrix for the demonstration / 

of the method. The correct generatrix Is, of course, found only 
by trial. The method in brief is as follows: 

Taking the correct generatrix, which la as follows: 

0 JCB3KPHSFH 

and going through the usual steps, to determine the series of x 
unknown means, ve have: 

P 1 P 2 P 3 P 4 P 5 p 6 p 7 P 8 p 9 P 10 P 11 P 12 
0 J C E 3 X P H S F- H 
70WXM 0 QEYTX 
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Setting up this series of letters in the ordinary alphabets we 
have the following^ FIG, 32): 



0 V 0 
G J C C 
D 6 U 7 
B L D F 
T M 3 S 
V Z N L 
W B 6 U 
6 C C C 
N 6 TJ H 
B L X 0 
T 4 Z S 
R 2 N 4 
I B B H 
6 H X I 
P 4 X Q 
R G V U 



DDF 
T G B 3 
A R T R 

V A V U 
G F W X 
H 7 6 0 
B 4 N F 
Z 5 B 2 
I R T V 
W A R L 
G B I X 
7 Y 6 2 
N 4 P V 
ZSRB 
M B 0 X 
7 J D F 
L G B J 
A R 5 G 

V N C 4 

V X M 2 



0JCE3KPH 



Y I 6 
I P L 
P 5 M 
5 Z Z 
Z M B 
M H C 
H A 6 
A P L 
P 5 4 
5 3 3 
S D B 
D H H 
H B 4 
B S G 
S Q J 

q i 6 

IPX 
PH 
T E V 
E V H 
W B 2 
B X 4 
K S 7 
3 F H 



BXB2MWRPB 
5HJ4RB22 
C V E V 7 Z P 
M H Q E 4 3 
P 2 X M M 
7 4 Y 4 
R 7 B 
2 H 
P 



rB E R 
C P X 
D Z G 
E B L 
F Y V 
G 2 D 
H N D 
IVY 
J ¥ 0 

k q m 

L R E 
M 3 K 
N H 5 
0 7 J 
PCS 
0X3 
R L B 

5 X P 
T 4 A 
U 5 H 

V I F 
W J 7 
X 3 C 

Y F I 
Z D 2 

2 G Z 

3 M q 

4 T 6 
5UN 

6 A 4 

7 0V 



X M 0 

T 5 T 

3 3 E 
W L P 
H Y Z 
M X B 
T Z Y 
U I 2 
D 4 N 

6 G V 

pqw 

L V Q 
ECR 
E 7 3 
Z T H 

3 3 7 
J R C 
R J X 
qPL 

0 B X 
FH4 
G 6 5 
A 2 I 
C X J 

7 E S 

4 D F 
N F D 

5 V G 
BOM 
Y H T 
2 A U 

1 IJ A 
X M 0 



GEY 
E 2 P 
CON 
B X 6 

V 4 M 
P 7 H 
G N 0 
F 6 X 
AYE 
Z u w 
M R V 

0 C G 
8VU 
J X D 

6 F B 
X B F 
E Q A 

7 P 2 
X J 5 
L 3 T 
U Z 3 
TIL 
D 5 J 

3 L I 
R M 4 
2 H 7 

1 T 3 

Y A Q 
W 3 Z ] 
5 D X < 

4 V R ] 
N G C ■ 
Q E Y ' 



FIG. 31 



FIG. 32 



The plain text BER2SEC0ND2T stands out very prominently. 
Counting down the first alphabet of the set-up shown In Fig. 31 * 
we find that It Is the 16th letter of our phrase WAR3BRPARTMENT2 
WASHINGTON, which begins the hypothetical phrase In Cycle -74, 
i.e., the word WASHINGTON occurs in New York 2# beginning with 
locus 405. With the section BER2SEC0ND3T as a start, it Is not 
difficult to add to the plain texts of all three cycles. The keys 
can be reconstructed simultaneously with the building of the plain 
texts. The proper placements of the Initial texts are shown 
herewith: 
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Upper key loel 
Lever key loci 
H.Y. 3 (Cycle -7*0 
Plain text 

Upper key loel 
Lover key loel 
NOR. 10 (Cycle -75) 
Plain text 







rp95 


405 


469 


477 


• « 


. . Z 


• « 


. . 2 




403 




478 


• « 


. D 4 



B E 



G 

R 



Q 

S 






7 JXUPKK 



Y 

E 



N £ 
G 0 



7 P 
3 T 



Upper key loel 
Lover key loci 
HOB. *21 (Cycle -76) 
, Plain text 



1403 

479 

OTXAQXNNUFRT. . . 
TRANSPORTATION. 



Upon proper occasion it may be desirable to slide tvo different 
phrases against one another. For example, WASHINGTON against 
NEV3YQRK. The methods discussed in the tvo preceding cases have 
been elucidated sufficiently, it Is believed to show that such a 
process vould be perfectly practicable. Special sliding alphabets 
vould be prepared and kept on file for use when the occasion arose. 

By means of this process, it Is possible to test all sorts of 
phrases, such as names of persons or places likely to occur in 
addresses or signatures. Given a sufficient number of messages 
favorable to the application of such a test, the process becomes 
a very valuable adjunct to other methods of attack. 

4. SOLUTION OF CASES NOT INVOLVING THREE SEQUENT CYCLES 

The possession of three cycles In unbroken sequence Is no 
longer absolutely essential to solution. We shall discuss the 
following four cases likely to arise in practice. 

A. The tvo experimental cycles sequent, the confirmative 
cycle at a short distance removed from either of the experimental 
cycles. 

B. Ths experimental and confirmative cycles equidistant. 

C. The distance between the confirmative cycle and the 
nearer experimental cycle is a multiple of the distance between 
the tvo experimental cycles. 

D. Cycles at irregular intervals from one another. 

The four cases will be studied in succession. 

A. (Case 1) — The two experimental cycles sequent, the confirm- 
ative cycle at a short distance removed from either of the experi- 
mental cycles. 

The solution of this case Is dependent upon two factors; first, 
how far removed the confirmative cycle Is from the two experimental 
cycles; and second, the length of the assumed text. Let us study 
three actual messages. 



L 
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"Upper key loci 
Lover key loci 
BOR » 10 (Cycle -75) 



Messages 

186 196 206 

;i 261 271 281 

li SXH7GMERHP3Q3NI3MCZVCTRV0 ... 



Upper key loci 
Lover key loci 
HOB. 20 (Cycle -76) 

Upper key loci 
Lover key loci 
WASH. 25 (Cycle -86) 



186 196 206 

262 272 282 

!|3CTPJIXXLK3P4PKQ5LDYE ... 

186 196 206 

272 282 292 

. ..KCF7TRQJU3NRM0ZJ6SXXQ ... 



Experimental 



Experimental 



Confirmative 



In this case ve have Norfolk 10 beginning in Cycle -75; Hoboken 
20, beginning in Cycle - 76 ; and Vashlngton 25, in Cycle -86, or 
ten cycles removed from Hoboken 20 j that is, the confirmative cycle 
is ten cycles removed from the nearer experimental cycle. Instead 
of being directly sequent, as has been the case in all the examples 
discussed heretofore. It was desirable to obtain a method by means 
of which possible beginnings for Norfolk 10 and Hoboken 20 could be 
tested very rapidly on Washington 25, and the folloving method was 
devised. 



Reconstruct the two keys without reference to any plain' text 
vhatever, using the series of cipher letters only In Cycles -75 
and -76 for the first 15 letters, beginning with 7 as a base -in 
loci 186 * 262, Cycle - 76 . Thus: 



Upper key loci 
Lover key looi 
Upper key (hypothetical) 
Lover key " 

Norfolk 10 (Cycle -75) 



186 196 

* 261 271 

! 0QFHDJEBUCC5BVK 

< 3PU75KPMJ4RAQJKZ 

ISXH7GMERHP3QSNI3MCZV. . . 



Experimental 



Upper key loci 
Lover key loci 
Upper key (hypothetical) 
Lover key " 

Hoboken 20 (Cycle - 76 ) 

Upper key loci 
Lover key loci 
Wash. 25 (Cycle -86) 



186 196 

262 292 

* 70QFHDJEBUfcC5BVK 

Experimental 

186 196 

272 282 

. . . KCF7TRQ JU3NRM02 J . . . 



[. 3PU75KPMJWQKZ0 
!i 3CTF JIXXL*p4PKQ . . . 



Por example, starting with 7 as the upper key letter of locus 
186 In Cycle - 76 , the resultant of 7 and 3 is 2, which becomes the 
lover key letter of locus 262. This then becomes the lover key 
letter above M in Cycle -75* The resultant of 3 and M is 0, upper 
key letter 187 , which Is now placed above C, the second letter in 
Cycle -76, etc. The process is exactly the same as that In recon- 
structing normal keys; except that no plain text Is used as yet. 

Keys produced in this manner, we have termed IMPERFECT KEYS, because 
they are not completed, or made symmetrical by the plain text letters 
which apply, and will therefore not produce plain text when shifted. 
Normal keys, or keys which will produce plain text ve have termed 
PERFECT BEYS, 



Since Washington 25 is ten cycles removed from Hoboken 20, then 
the lower Imperfect keys of the latter beginning with RAQKZ 
(after the bar in the diagram) must be united with the upper im- 
perfect keys of the beginning point of Hoboken 20, and these must 
be applied as shown below, to the cipher in Washington 25, beginning 
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vlth K C P 7 • • • • The series of letters which a r® produced 
ve term, as before, the BASE: 

Upper key loci 186 

Washington 25 Lover key loci 272 

(Cyole - 86 ) Upper lmjwrfect keys 7 0 Q P H D . * , 

Lover imperfect keys R A Q X Z 0 . . . 

Cipher E C F 7 T R , . . 

Base 3 Y F 2 Y 6 

Nov it Is patent that if ve had included the assisted plain 

text for Norfolk 10 and Hoboken 20 in constructing the keys, the 
b&se vould have become the plain text for Washington 25 ; and had 
the assumed plain text been the correct plain text for those two 
cycles, then the base vould frave~to be intelligible plain text. 
However, whether ve Include such assumed plain text in the first 
steps, working with perfect keys, or apply it after imperfect keys 
have yielded the base, the final result will be the same, providing 
ve go through the correct steps. 

It is also patent that although the assumed plain text consists 
of two distinct parts, one applying to Norfolk 10, the other to 
Hoboken 20, it is perfectly correct to test the effect of these two 
parts separately. That is, ve may assume one phrase as the begin- 
ning of Hoboken 20 and try it in combination with all possible 
beginnings for Norfolk 10, exactly as was done in Section 3* 

Nov as far as the first few loci of Washington 25 are con- 
cerned, the assumption of plain text for Hoboken 20 will have two 
effects: first, upon loci 186 b 187 ... of the upper keys, and 
secondly, upon loci 272 & 273 **• of the lover keys. Let us 
analyse these effects in detail, as arming Hoboken 20 to begin with 
TRAK3P0RTATI0N3SERVICE „ 

Locus 186 of the upper key is unchanged, since ve still retain 7 
as the base for reconstruction of the keys. Locus 262 of the lower 
key is affected by the first letter of the assumed beginning, viz, 

T. It vould result in producing a letter different than the one 
shown (3) for locus 262 of the lower key and this in turn vould 
give a different letter in locus 187 of the upper key. Locus 263 
of the lower key vould be affected again by the second letter of 
the assumed plain text beginning for Hoboken 20, and this in turn 
vould affect locus 188 of the upper key. In short, the effect is 
progressive and cumulative . This series of effects will be pro- 
duced by the following series of letters: 



T T T T T , , . 

R R R H . o . 

AAA. 0 . 

IN. . . 

3 » o • 

TITS TTTT7 

Such a series of summations has been termed the PROGRESSIVE 
VALUE of a phrase, and the integral sign placed before a series of 
letters will Indicate that the progressive value of the series is 
to be taken. Thus, f TRANSPORTATION means that the progressive 
values, letter by letter, are to be taken. 
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This progressive value Must be applied to the base, and since 
the first locus of the upper key to be affected by the plain text 
assumed is 187 , we apply the progressive value as shown below : 



Upper key loci 
Lower key loci 
Base 

Progressive value of 
assumed plain text 
for Cycle -Jb 

Sums 

We have so far found the effect of the assumption of plain 
text in Hoboken 20 only upon the upper key loci 136 to 190. Kov 
we must find the effect upon the lower key loci from 272 to 27 6, 
for they, too, are involved in the process of finding the plain 
text; for Washington 2f>. 

f 

The first lower key locus affected is 262, by the letter T of 
TRANSPORTATION., The next Is locus 263, by the letter R, and so on. 
The effect is likewise progressive and cumulative. It will be as 
follows, in detail: 



186 187 188 18 S 190 191 
272 277 274 275 276 277 
S Y F 2 Y 



T G B _ Y T 

S 3 Q 6 7 J 



262 263 264 265 266 267 268 269 270 271 272 275 



T 

R 



T 

R 

A 



T 

R 

A 

H 



T 

R 

A 

I! 

S 



T 

R 

A 

N 

S 

P 



T 

R 

A 

N 

5 

P 

0 



T 

R 

A 

N 

S 

f 

0 

R 



n» 

i* 

R 

A 

N 

S 

P 

0 

R 

T 



T 

B 

A 

H 

S 

P 

0 

R 

T 

A 



T 

R 

A 

N 

3 

P 

0 

R 

T 

A 

T 



T 

R 

A 

R 

S 

P 

0 

R 

T 

A 

T 

I 



274 275 276 277 

^ T T T 

R R R R 

A A A A 

If II H N 

C‘ o o q 

a U u 

p P P ? 

0 0 0 '0 

R R R K 

T T T T 

A A A A 

^ ip fp 

XIII 
0 0 0 0 

N N N 



3 5 

3 

"T~r g— - -y- ' Q "*in e' 3 



Since the first lower key locus involved it Washington 25 is 
2 72 ., we begin with the letter Q of the progressive value, and apply 
the series to the base already corrected as regards upper keys. 

Thus : 

Upper key loci 
Lower' key loci 
Base, corrected for ) 
imperfect upper keyf 
Correction for iia- ) 
perfect lower key j 
First resultant 

This series of letters, corrected for upper and lover key letters 
as affected by the plain text assumed for Hoboken 20, we term, as 
before, the FIRST RESULTANT » 



186 

272 

S S Q. 6 7 J . 

ftSDSE 3 . 
~l h v v n r 
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The steps illustrated above are summarized belov in standard 

form: 

Upper) ' 

key 18 6 187 188 189 190 191 192 193 194 195 196 197 198 199 200 

loci J 
Lover) 

key 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 
loci / TRANSP OR TATIO N?? 
Progres-) ^ /* | It /fit 

Sive > T 0^ Y T I V H 3 U QT Z D S E 3 
value ) 



Upper key loci 
Lover key loci 
Base 

Correction for im- 
perfect upper key 
Correction for im- 
perfect lover key | 
First resultant 



186 187 188 189 190 191 • 
272 273 274 275 276 277 • 
S Y F 2 Y 6 . 



E K 



We are nov ready to assume beginnings for Norfolk 10. We may omit 
the incorrect trials and proceed at once-vith the correct phrase, 
ADJUTANT3QENERAL3ARMy. The steps are practically the same as above. 
The progressive values are sought, beginning vith the second A of 
ADJUTANT, since it falls under upper key locus 187, and is therefore 
the first letter vhlch enters into calculation. 



Progressive) 
value ) 



ADJUTANT3GENERAL3ARMY. . . 

AK 56 E 7 KFU 3 PLZ 6 UL. . . 



Upper key loci 186 187 188 189 190 191 . . . 

Lover key loci 272 273 274 275 276 277 .. . 

- Second resultant L H V V E K . * . 

Correction for !■-) A K 5 6 B . . . 

perfect upper key! 

Correction for im-j^ 3 P L g 6 U . . . 

perfect lover key) 

Plain text P E A T E D . . . 

Having found intelligible plain text for Washington 25, perfect 
keys are constructed in the normal manner and the decipherment 
continued. 

The process described above has been carried out in full detail 
to demonstrate its mechanics. It may be summarized belov: 



Upper key loci 
Lover key loci 
Base 

Correction for assumed 1 
plain text of Cycle -76) 
First resultant 



186 

272 

S y F 2 y 6 

TOBY! 
Q Z D S E 3 



( (transportations . . . ) 
t TGBYTIVH3UQZDSE3...) 



Correction for assumed l 
plain text of Cycle -75) 
Plain text for) 

Cycle -86 ) * 



A I 5 6 E 
P L Z 6 U 



P E A T E D 
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This process takes longer to describe than to perform, naturally, 
and compared with the time it would take to try out all possible 
combinations of beginnings by constructing perfect keys in each case, 
it is several hundred times more rapid. The progressive values for 
all possible beginnings, once having been determined, can be kept 
on file so that with all the data at hand the process is extremely 
rapid* 

B. (Case 2) —Experimental and confirmative cycles equidistant. 

Given three cycles which are equidistant, with two of them 
beginning near the same locus, a solution is possible, provided that 
the assumed text contains three or four more letters than the dis- 
tance between the cycles. 



Example 

Message 1 - Key indicators 300 * 309 (Cycle -9) 

XBCPRAQ40K?6N0XVZAKDKXZ. , . 

Message 2 - Key indicators 303 * 316 (Cycle -13) 

V L L 0 2 A K D Y RJ2VSP0U4HJ0Q. * * . 
Message 3 - Key indicators 100 * 117 (Cycle -17) 

The section beginning with 303 * 520 is as follows: 

• . .GDACIWSUUUP2TY5KC6. . . 

These messages are arranged as follows: 



500 303 515 

309 512 322 

Message 1 (Cycle -9) XBCPRAQ40KP6E0XVZAKDNXZ... 

303 ' 313 

316 326 

Message 2 (Cycle -13) VLL02AKDYRJ2WSPGU4HJ. . . 

303 313 

320 330 

Message 3 (Cycle -17) , , , G D A C IV S C U C P 2 T Y 5 K C 6 6 0 . . . 



We must first prepare these cipher letters properly so as to 
be able' to make trials quickly. The reconstruction of the two im- 
perfect keys is first carried out. Inasmuch as the steps are some- 
what different from the ordinary ones in constructing keys from 
sequent cycles, we will show them somewhat in detail. 



303 

312 

Cycle -9 X B C P R A q 40 K P 6 H 0 X V Z A K D HI Z 



Cycle -13 



303 
316 
W L 



L02AKDYRJ 2WSP0U4HJ 



303 

320 

Cycle -17 , . . G D A C IV S G B U P 2 T Y 5 X C 6 6 9 
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These cycles are four apart. Let us divide up the three lines 
into sections of four letters, beginning with the letters falling 
beneath upper key 303. Thus; 



Cycle -9 



Cycle -13 



Cycle -17 



303 

512 

X B C P R A <3 
303 
316 

W L L 0 
303 
320 

. G D A C! 



<307 

316 

; 4 OK 
307 
520 

3 2 A K 
507 
524 

J I W S 



311 
520 
6 N 0 
311 
324 
Y R J 
311 
528 
UUP 



515 
324 
V Z A 
315 
328 
VS? 
315 
532 
T Y 5 



319 
328 
D H X 
319 
532 
U 4 H 
519 
336 
C 6 6 



Since these cycles are four apart, then the construction of 
the two keys from Cycles -9 and -13 must be carried out in Intervals 
or periods of four . That is, if we assume the upper key for the 
first of Cycle -13 to be 7* then the lower key would be W. This 
letter V, the 316th letter of the lower key must then be placed 
above the letter 4 in Cycle -9, that is in the locus designated as 
307iin Cycle -9. The resultant of W and 4, viz, 6 , is then 307 th 
316) 



upper key letter. 



Applying 6 to locus {307 in Cycle -13, we get B 

l320 



for the 320th letter in the lower key. This letter applied to the 
locus ''311 in Cycle -9 gives 2 as the 311th upper key letter, etc. 
1320 

The result is as follows; 



Cycle -9 



Cycle -13 



Cycle -17 



P R A 
303 
316 

7 

W 

W L L 
503 
520 
G D A 



gn 

320 

2 

B 

K R 6 N 



2 A K B Y R 
507 [311 



1324 
j I W 



515 

328 

D 

G 

3 W £ 
[315 
f532 



{319 

328 

W 

G 

sen 

bi9 

332 

w 

H 

au 4 H 
bi9 
J336 

Kl C 6 6 



We have been dealing so far with the first position letters 
in these sections of four letters, or as we shall term them the 
first elements of the periods . Let us now take up the second, 
third, and fourth elements of the periods, beginning, as before, 
with 7 as a base, that is, as the upper key letter in loci i304, . f 305 , 

1317 >318 

and( 306 in Cycle -13 • Each set or series of letters is entirely 

1319 

Independent of any other set, and that is why it is absolutely im- 
material with what letter as a base each series is begun; the ul- 
timate result, viz, the interaction of certain letters in Cycle -17, 
will be the same regardless of the initial letter in each set of 
elements. The four reconstructed, and independent; series are as 
shown below, and the manner in which they interact in the third mes- 
sage is also indicated. The result of applying the keys to the 
cipher letters is marked BASE. Of course, no plain text appears 
as yet. 
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Cycle -9 



Cycle -15 



Cycle -17 



' Upper key loci 505 307 311 515 519 

Lover key loci 512 516 520 524 528 

Upper key loci 6 R X C 2SRGDV 2 Q W Q D V 

Lover key loci WLL0BDLUQKE0G6HK 

. Cipher XBCPRAQ40KP6N0XVZAKDNXZ 

^Upper key loci 505 307 311 515 319 

l L over key loci 516 520 524 528 532 

\ Upper key loci 77776R3iC2SRGDV 2 Q W Q D V 
f Lover key loci WLLOBDLUQKE 0G6HKH5XY 

l Cipher WLL02AKDYR J 2WSP0U 4 H J 

fUpper key loci 505 307 311 515 319 

l Lover key loci 520 524 528 532 536 

i Upper key loci 77776 RXC 2 SRGDV 2 Q W Q D V 
' Lover key loci BDLUQKE 0G6HKH5XY 

^Cipher GDACIWSUUUP 2 TY 5 KC 660 

BASE A 7 Z D|R P B Z|5 B 4 QjP H 7 F| 



\ Upper key loci 77776 RXC 2 SRGDV 2 Q'WQDV . 

j Lover key loci BDLUQKE 0G6HKH5XY 

\CIpher GDACIWSUUUP 2 TY 5 KC 660 . 

BASE A 7 Z DlR P B Z|5 B 4 QjP H 7 F| 

C‘> & (2) 0*) 

We are ready nov to try out various beginnings. As before, ve 
vill assume one beginning, keeping it constant, and trying all other 
b egin nings vith it. Let us assume Cycle -15 begins vith ADJUTANT5 
GENERAL, and proceed to apply corrections for imperfect keys for 
Cycle -15 first. The upper keys for the first period of Cycle -17 
are unaffected by the plain text assumed. The lover keys are affected 
by the letters ADJUTANT. In the preceding section ve corrected the 
keys by adding the progressive value of the plain text, and this 
value vas determined by adding the letters of the plain text in their 
direct sequence. But in this case, since the four elements of the 
periods are Independent, ve cannot apply merely the progressive 
value but must apply vhat shall be termed the PERIODIC PROGRESSIVE 
VALUE, found by adding in progressive manner every nth letter of 
the assumed plain text, n being the period. Or, put In the form of 
an expression, the signj~ /4 Is understood to Indicate that the 
progressive value of every fourth letter of the series Is to be 
taken. For the first period of Cycle -17 the correction for Imper- 
fect lover keys vill therefore be the folloving: 

„ 1st period 



f 3TET7 
STAN 
\ ffTTu 



This correction applied to the first period of the base gives 
the folloving: 



Base 

Correction for im- 
perfect upper key 

Correction for im-] 
perfect lover key j 



1st period 
A 7 Z D 



V R U 



2nd period 
R P B Z 



5rd period 
5 B 4 Q 



First resultant 
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The corrections for imperfect upper and lover keys for the 
second and third periods are as follows: 



2nd period 



AD JU 



jover ke? 



C A D J U 
)k T A N T 
3 0 E N 

flTB 



5rd period 



A D J U 
T A N T 

mi 



bower kej 

A D J U 
T A N T 
3 G E N 
E R A L 

rtrsTJ 



these corrections are applied to the respective periods as follows: 



Base 

Correction for im- 
perfect upper key 
Correction for im- 
perfect' lower key 

First resultant 



1st period 



A 7 2 D 



V R U Q 



T R P V 



2nd period 3rd period 



R P B Z 
A D JU 

AT 16 



V K H F 



5 B 4 Q 
WRDQ 

P G 3 D 
G D R D 



Having determined the first resultant we are now ready to test 
all possible beginnings for Cycle -9. Let us proceed at once to 
the correct one, viz, C0MMANDING3GENERAL. The periodic progressive 
corrections are found as before, beginning with the letter I of 
COMMANDING since it is the first one to enter into the calculations, 
that is J/k ING3GENERAL is to be taken. 






No correc- 
tion neces- 
sary 



riod 



over ke 



I N G 3 



2nd period 
er key Lower ke? 



I N G 3 



I N G 3 
GENE 

rm 



I N G 3 
GENE 

ft’rrs 



These corrections are applied to the second resultant and yield 
intelligible plain text. Thus: 



First resultant 
Correction for im-j 
perfect upper key! 
Correction for im-j 
perfect lower key] 
Plain Vext 



at period 
T R P V 



I N G 3 
-PING 



>eriod 



VKHP 
I N G 3 

M F P S 
3 C 0 N 



?rd period 

G D R D 
HPPS 



T R 0 L 



All these steps may be simplified and summarized as shown 
below. It was necessary to go through all the steps above in order 
to show the mechanics of the process in detail. But if these steps 
be analyzed carefully, it will become apparent that certain repe- 
titions of plain text periods cancel out, being duplicates, so that 
the final result is achieved just as well by going through only 
the following steps: 
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Base 

Correction for plain) 
text of Cycle -13 J 
First resultant 
Correction for plain) 
text of Cycle -9 / 

Plain text for) 

Cycle -17 j 



1st period 

A 7 Z D 
A D J U 
T A N T 

nr nr 

I N G 3 



2nd period 

R P B Z 
T A N T 
3 G E N 
vicin? 

GENE 



3rd period 

5 B 4 Q 
3 G E N 
E R A L 

innrT 

R A L 6 



PING 3C0N TROL 



No further comment is necessary in regard to the rapidity of 
the process. Once intelligible text is found, new keys are con- 
structed employing the deciphered plain text and taking into account 
the fact that the periods consist of four Independent elements. 

The reconstructed keys will not be perfect keys, but they will 
operate in every case where the cycle involved is four or a multiple 
of four intervals away from any of the cycles which entered into 
their reconstruction ♦ ‘ 

C. (Case 3) — The distance between the confirmative cycle and 
the nearer experimental cycle is a multiple of the distance between 
the two experimental cycles. 



In the case just discussed, the cycles were equidistant. The 
process can be applied likewise to those cases in which the distance 
between the confirmative and the nearer experimental cycle Is a 
multiple of that between the two experimental cycles. The practical 
application of the method Is dependent upon the same two factors 
as before, viz, the distance between the cycles, and the length 
of the plain text assumed. An example taken from the series of 
test messages will serve our purposes. The messages have been 
arranged for decipherment: 



Messages 



tipper key loci 
Lower key loci 
N.Y. 20 (Cycle -$09) 



014 

623 

. . .VQVY43VG36 . . . Confirmative 



Upper key loci 
Lower key loci 
HOB. 32 (Cycle -621) 



1 002 014 

623 635 

INT4S J07VCK73RS0FEY2HI07VPB . . . Experimental 



Upper key loci 
Lower key loci 
WASH. 13 (Cycle -624) 



* 



002 014 

62 6 638 

VCCSGUFWMUDY2NR 02GHPIB 



# « • 



Experimental 



Hoboken 32, and Washington 13, the experimental cycles, are 
tbree cycles apart; while New York 20, the confirmative cycle, 
and Hoboken 32, the nearer experimental cycle, are twelye cycles 
apart; in other words, the distance between the first and second 
cycles is the fourth multiple of that between the second and third. 



Let us reconstruct imperfect keys employing the principles 
of periodicity just elucidated. The period, being the distance 
between the experimental cycles, is three. The keys, using X, Y, 
and Z as bases, are as follows: 
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N.Y. 20 
Cycle -609 



HOB. 52 
Cycle -621 



WASH. 13 
Cycle -624 



Upper key loci 
Lower key loci 
Cipher 

Upper key loci 
Lover key loci 
Upper key loci 
Lover key loci 
Cipher 

Upper key loci 
Lover key loci 
tipper key loci 
Lover key loci 
Cipher 



014 

623 

. . .VQVY43VG36 

002 014 

623 635 

XYZXYT0JXJ7NFM66PDARS 

PFKA 65 OKQCOENDBKTZAHW 

IT4SJ0WCK73RS0FEY2HI07VPB 



002 014 

626 638 

I XYZXYT0JXJ7HFM66PD 
! A 65 OKQC OE NDBKTZAHW 
j VCC3GUPWMUDY2NR 02GHPIB 



Applying to Nev York 20 upper keys 014 . . . and lover keys 623 . 
ve have the following: 



It. Y. 20 
Cycle -609 



Upper key loci 
Lover key loci 
Upper key loci 
Lover key loci 
Cipher 
Base 



FM 66 PDARS 

PFKA 65 OKQ 

VQVY43VG3 

SIRFSLS 5 P 



Let us assume for the plain text of Hoboken 32, SURGE0N3GENERAL6 
N52WASHINGT0N, and determine the first resultant. Ve must begin 
with the E of SURGEON, since that is the first letter which enters 
into relations. 



3 G E 
r N E R 
A L 6 
' R 5 2 

rrr 



arlod 
Lover ke: 



EON 



Nev York 20 
2nd peFlod 

Jpper key Lover key 



3 G E 
N E R 
A L 6 
N 5 2 
V A 5 

rrr 



No cor- 
rection r 
necessary J 3 



3 G E 
N E R 
A L 6 
N 5 2 
V A 5 

m 



3 G E 



Base 

Correction for im-< 
perfect upper key; 
Correction for im- 
perfect lover key] 
First resultant 



1 st period 



U P L 



EON 
A 4 H 



2nd period 

TsT — 

H Y F 



B T 5 



5rd period 
T 5 I 

U R 4 



R K 5 



Let us now try as the assumed plain text of Washington 13 the 
correct beginning, BEPARTMENT 3 AIR 3 SBRVICE . 
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New York 20 



1st period 

Upper Icey Lover key 



2nd period 

Upper key Lover key 



3rd period 

Upper key Lower key 




DEP 

ART 

MSN 




No correc- 


DEP 


tion neces-^ 


ART 


sary J j 


5 MEN 
T 3 A 
I R 3 
7 3 F 



DEP 




DEP r DEP 
ART / 3 ART 
MEN / m 
T 3 A 
I R 3 
3 E R 
gTTX 



First resultant 
Correction for Im-i 
perfect upper key) 
Correction for im-) 
perfect lower key/ 
Plain text 



1st 

~T 


period 

IT"' 


2nd period 
B T 5 


3rd 

T 


period 

■rr— 


I 


C D 


7 5 F 


3 


s u 


_ 


«. — 


DEP 


R_ 


J I 


3 


I X 


T Y 3 


3 


E V 



The appearance of the words SIXTY3SEV . . . gives the beginning of 
excellent plain text. The keys are reconstructed and the decipher- 
ment continued. 



The short-cut, eliminating all details, for this process is sum- 
marized below. The plain text letters are the summations of the 
letters in the columns. 



New York 20 



Base 



1st period 2nd period 

Sit F si 



3rd period 

sin 5 — 



Assumed plain text 
for Hoboken 32 



Assumed plain text 7 
for Washington 13 ) 

Plain text for New) 
York 20 T 



EON 
3 0 E 
N E R 
A L 6 
N 5 2 


3 G E 
N E R 
A L 6 
N 5 2 
. w A 5 


N E R 
A L 6 
N 5 2 
W A 5 
- - 5 5 S 


i) E 'P 


ART 


MEN 


ART- 


MEN 


T 3 A 


MEN 


T 3 A 


I R 3 


T 3 A 


_ __.I_R.3_ - 


3 E R 


SIX 


T Y 3 


S E V 



D. (Case 4) — The three cycles at Irregular intervals. 

We have been leading up, step by step^. to the solution of the most 
important case of all, viz, that in which no sequent cycles, or 
cycles at any regular distances apart are available. This case Is, 
of course, the most valuable from the practical standpoint, and 
warrants restatement. It means that given two messages separated 
by 2, 3* . .. up to say 15 cycles, plain text may be assumed and 

tested upon any other cycle that may be available, providing only 
that the keys applying to this third cycle fall within the sections 
of assumed plain text. 

Let us study an actual example taken from the series of test 
messages. We shall choose as the experimental cycles Hoboken 32 
and Washington 13 , which are three cycles apart. For the confirmative 



r 
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cycle we shall take Washington 39- In the diagram below the mes- 
sages have been arranged for decipherment j Imperfect keys have been 
constructed and applied to Washington 39 . 



Hoboken 32 
Cycle -621 

Upper key loci 785 

Lower key loci 619 

Imperfect upper key 
Imperfect lower key. 
Cipher |JN T 

* 

Washington 13 
Cycle -621 
Upper key loci 
Lower key loci 
Imperfect upper key 
Imperfect lower key 
Cipher 

Washington 39 (£««$ 
Cycle -631 
Upper key loci 
Lower key loci 
Imperfect upper key 
Imperfect lower key 
Cipher 

Base 



002 
623 
X Y Z 


X Y T 


0 J X 


012 
633 
J 7 N 


P M 6 


6 P D 


022 
004 
A R S 


PPX 


A 6 5 


0 K Q 


COE 


N D B 


KTZ 


A H W 


3 J 0 V 


V C K 


7 3 R 


SOP 


E Y 2 


H I 0 


7 V P 


002 
626 
X Y Z 


X Y T 


0 J X 


012 
636 
J 7 H 


P M 6 


6 P D 


022 
007 
A R S 


A 6 5 


0 K Q 


COE 


IDB 


KTZ 


A H V 


Q M A 


vcc 


SOU 


P V M 


U D Y 


2 N R 


0 2 G 


H P I 


002 
633 
X Y Z 


X Y T 


0 J X 


012 
004 
J 7 H 


P M 6 


6 P D 


022 
014 
A R S 


0 E N 
U D L 


DBS 
6 5 K 


T Z A 
D X R 


H W Q 

A G 7 


M A Q 
P L 6 


Z 

A H P 


4 5 T ' 


2 X K 


K W T 


E U H 


M D 6 


M P Qf 







m 



c .. 

Q M 
BH 



T 

2 



C T 



Before we can proceed , it will be necessary to introduce into 
the discussion a feature which presents itself here for the first 
time. 

The distance between the two experimental cycles determines 
the period and the periodic length is simply the sum of the number 
of its constituent elements. As regards the upper key, the periods, 
and therefore all their constituent elements, for all cycles, 
coincide, since all of our analysis is based upon the fiction of 
a stationary longer (supper) key. But as regards the lower key, 
which in our analysis is regarded as the moving key, any period in 
one experimental cycle has a homologous period in the other experi- 
mental cycle, both periods being composed naturally of the same 
elements and in the same order. In other words, the first, second, 
third . . . elements of a given period of one experimental cycle 
coincide with the first, second, third ... elements of a homologous 
period of the other experimental cycle. The case is somewhat 
analogous to that in wave motion, when two waves of similar period 
reach their maximum magnitude simultaneously, the two waves being 
in a condition termed as "in phase." 

How, in the case of three equidistant cycles, the lower key 
periods of the confirmative cycle are in phase with those of the 
experimental cycles. The same is true of the case where the distance 
between the confirmative cycle and the nearer experimental cycle 
is a multiple of the distance between the two experimental cycles. 

But in the case which conforms to neither of these cases, that is, 
where the distance between the confirmative cycle and the nearer 
experimental cycle is neither equal to nor a multiple of the dis- 
tance between the two experimental cycles, the lower key periods 
of the confirmative cycle are not in phase with those of the 
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experimental cycles. The condition, to continue the analogy with 
wave motion, exhibits a "difference in phase"; and In this case, 
with a period of three, the difference is either l/3 or 2/3 of a 
period. That is, the periods of the confirmative cycle are either 
advanced or retarded 1/3 or 2/3 of a period. When this is the case, 
the application of imperfect keys derived from the two experimental 
cycles will not result in the production of intelligible text in 
the confirmative cycle unless a correction for the difference in 
phase is applied. The reason for this phenomenon is obvious when 
one considers the origin of imperfect keys as contrasted with that 
of perfect keys. In reconstructed perfect keys, adjacent letters 
of both the upper and the lover key bear a definite relation to 
one another --they are the Individual successive links of a continuous 
single chain which has been made^link by link^from the plain text— 
cipher text relations. But imperfect keys that have been constructed 
from experimental cycles not directly sequent consist of several 
Independent chains which "dovetail" in such a manner as to produce 
intelligible text only where the periods of the confirmative cycle 
are In phase with those of the experimental cycle. These chains 
are independent because they are generated by Independent, unrelated 
base letters. 



The difference between keys of these two types is comparable 
to that between a single phase and a polyphase alternating current 
of electricity, and we have termed a key of the first type a 
MONOPHASE KEY, and one of the second type a POLYPHASE KEY. The 
difference between them may be shown diagrammatically in the follow- 
ing sketch: 



Monophase 

Polyphase 



Difference in phase in 
in diagrammatic manner: 





phase 



phase 



difference (120°) 



difference (240°) 



If, after a polyphase key has been constructed, we can establish a 
relationship between the letters or elements of its period ( ~ the 
phases of the period) , then the Independent chains of the polyphase 
key may be merged and converted Into one continuous chain which 
will then constitute a perfect monophase key. 



Let us proceed now to decipher the messaged. For the beginning 
of Hoboken 32, one experimental cycle, we will assume SURGE0N3 
GENERAL6N52WASHINGT0N. The corrections to be applied are shown 
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below. The upper keys being constant. Its periods are in phase 
throughout all cycles. The lover key periods of Washington 39 are 
out of phase with those of t£e experimental cycles, being retarded 
l /3 of a period. The elements of the periods of Washington 39 are 
in the order 2 - 3 - 1 , instead of 1 - 2-3 because the first elements of 
the periods of Washington 39 are the second elements of those of 
the experimental cycles. For this reason the correction to be 
applied to Washington 39 takes the following fora: 



iriod 



>eriod 



rer kej 



rer kej 



No correc- 


2-3-1 


1-2-3 


2-3-1 


1-2-3 


2-3-1 


tion neces- 


. . 3 


3 G E 


• • 3 


3 G E 


. . 3 


sary 


GEN 




GEN 


N E R 


GEN 


BRA 




ERA 


4" 6 ~J 


ERA 




K~T~J 




L 6 N 




L 6 N 








jppTf 




52V 
P L H 



sriod 
Lower ke: 



srlod 
tower ke: 



1-2-3 
3 G E 
OR 
A L 6 
TTTT 



2-3-1 
• • 5 
GEN 
ERA 
L 6 N 
3 2 W 

m 



1 - 2-3 

3 G E 
N E R 
A L 6 
N 5 2 

TpT 



2 - 3-1 

. . 3 
GEN 
ERA 
L 6 N 
5 2 W 
A 5 5 
5 S H 
R 4 5 



1st Per. 2nd Per. 3rd Per. 4th Per. 5th Per. 



Base 

Correction for ) 
imp. upper key] 
Correction for ) 
imp. lower key] 
1st resultant 



2 X 


X 


KWT 


E U H 


M D 6 


- - 


- 


3 G E 


4 6 J • 


J D T 


VO 


J 


D T U 


P L H 


Y P J 


B P 


3 


2 B P 


5 C J 


2 F T 



M F Q 
U P L 

R 4 5 
Z W G 



Let us assume for the beginning of Washington 13 the phrase 
DEPARTMENT3AIR3SEHVICE. The corrections are as follows: 
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ft 






1st period 

Upper key tower key 


2nd period 

Upper key Lower key 


3rd period 
Upper key Lower 


key 


No correc- 


2-1-3 


1-2-3 


2-1-3 


1-2-3 


2-1- 




tion neces- 


. . D 


D E ? 


. . D 


D E P 


• » 


D 


sary 


E P A 
R T M 
JLiLI 
K“R I 




E P A 
R T M 
ENT 
3 A I 
<Tff7 


ART 

mn 


E P 
R T 
E N 
3 A 
H 3 

rr 


A 

M ' 
T 
I 
S 
•S’ 



4th period 



Upper key 


Lower key 


1-2-3 


2-1-3 


D E P 


. . D 


ART 


E P A 


HEN 


R T M 


P R R 


ENT 
3 A I 
R 3 s 
E R V 
S U 6 



5th period 


Upper key 


Lover key 


1-2-3 


2-1-3 


D E P 


. . D 


ART 


E P A 


MEN 


R T M 


T 3 A 


ENT 


rlns 


5 A I 
R 3 S 
E R V 
I C D 

m 



Let us now apply these corrections to the first resultant: 



1st resultant 
Correction for ) 
imp. upper key] 
Correction for ) 
imp. lower keyj 
2nd resultant 



1st Per. 

TTT' 


2nd Per, 


3rd Per. 
5“B'T 


4th Per. 
2 P 7 


5th Per. 
ZlT <T“ 


- - - 


D E P 


R J I 


P R R 


I C D 


R R I 


C D 7 


3 P S 


S U 6 


A D G 


W M 2 


S Z 7 


Z 4 4 


Z 7 Z 


HHD 



We are ready now to apply the correction for difference in 
phase. Our imperfect polyphase keys consist of three independent 
chains , generated by the initial letters X, Y,and Z. Let us design- 
ate by the letters k^, k 2 > land k-* those letters in perfect mono- 
phase keys which occupy the positions of X, Y, and Z of our imperfect 
polyphase keys. Now kg and k^ are related insofar as kg is derived 

from kj by means of the plain text-cipher relations which intervene; 
and k-x is related to k 2 in the same manner. If we could convert X 
into Jci, Y into k 2 and Z into kj, our imperfect polyphase keys could 
be converted into perfect mdnopnase keys. Now X plus an unknown 
letter Cti would equal k^; Y plus an unknown letter eg, would equal 
kg; and Z plus an unknown letter c-*, would equal k*. These three 
unknown letters Ci, c 2 , and c-j, which would constitute the correc- 
tions for phase difference, would repeat themselves periodically 
throughout the imperfect keys. We can transfer these relations 
directly to the second resultant. 

Second resultant - W M 2 S Z 7 Z44 Z 7 Z HHD 

W plus the unknown letter c^ would give the correct plain text 
for that locus; M plus eg would give the correct plain text letter 
for the second locus; and 2 plus c-» would give the correct plain 
text letter for the third locus. The cycle would repeat itself 
throughout the second resultant. 
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Z|p t ©i = correct plain text for 1st letters of periods 

l) 



fl 

4> t Co ~ correct plain text for 2nd letters of periods 
7 

H ) 




c-j - correct plain text for 3rd letters of periods 



The correction being constant for the three elements of the 
periods, we may set up the respective elements of these periods on 
the ordinary sliding alphabets, whereupon the correct plain text 
for each set of elements will appear on one generatrix which can 
be selected from all others by inspection, since it will be the 
one which contains the best assortment of high-frequency letters. 



The correct generatrix will be different for each set of 
elements, of course, but by selecting the most likely generatrices, 
the corrected elements will now form intelligible plain text. 

Thus: 



GEN. 


W S Z Z H 


M Z 4 7 H 


2 7 4 Z D 


A 


‘ T I L 15 


5 L'J A Q 


E A" Jr t R 


B 


R M 4 4 P 


S 4 Z B F 


6 B Z 4 T 


C 


X J 5 5 G 


L 5 I C G 


N C I 5 0 


D 


G N 0 0 X 


Y 0 E D X 


J D E 0 7 


E 


L 3 T T Y 


X T D E Y 


A E D T 4 


P 


V 4 M M B 


ZHSFB 


K P S M 3 


0 


D 5 J J C 


I J L G C 


0 G L J W 


H 


U Z S S 7 


4 S M H 7 


P H M S X 


I 


Y A Q Q L 


G Q C I L 


3 I C Q K 


J 


0 C G G 5 


Q G A J 5 


D J A G 2 


K 


M R V V 6 


V V U K 6 


PKU'TI 


L 


E Q A A I 


C A G L I 


T L G A 6 


M 


K B P P 4 


7 P H M 4 


V M H P Y 


N 


5 D X X 0 


T X 3 10 


C N 3 X S 


0 


J X D D N 


3 D T 0 N 


G 0 T D Z 


P 


S W U U 2 


R U V P 2 


H P V U 5 


Q 


3 L I I A 


J I 5 Q A 


Y Q 3 I V 


R 


B K 6 6 V 


P 6 2 R V 


4 R 2 6 A 


S 


P 7 H H Z 


B H F S Z 


U S P H N 


T 


A Y E E 3 


N E 0 T 3 


L T 0 E B 


U 


H 2 P P W 


6PKDW 


S U K P C 


V 


F 6 K K R 


2 K P V R 


M V P K Q 


¥ 


7 P 2 2 U 


K 2 6 W U 


Z W 6 2 G 


X 


C 0 N N D 


E N Y X D 


5 X Y N H 


Y 


I T 3 3 E 


D 3 X Y E 


Q Y X 3 M 


Z 


2 H 7 7 S 


P 7 B Z S 


W Z B 7 G 


2 


Z U W W P 


V V R 2 P 


7 2 R W J 


3 


Q E Y Y T 


OYNJT 


I 3 N Y P 


4 


6 P B B M 


H B 7 4 M 


R 4 7 B E 


5 


N G C C J 


A C Q 5 J 


X 5 Q c P 


6 


4 V R R K 


0 R ¥ 6 K 


B 6 ¥ R L 


7 


W S Z Z H 


M Z 4 7 H 


2 7 4 Z D 
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Note that in the set-up of the first elements the Y generatrix 
is composed entirely of high-frequency letters, I f 3 3 B. In the 
set-up of the second elements the T generatrix is composed of high- 
frequency letters, N E 0 T 3- Uniting the first and second elements 
in the third resultant we have the following: 



1 


2 


3 


4 


5 


12 3 


12 3 


12 3 


12 3 


12 3 


Third resultant: W M 2 


S Z 7 


Z 4 4 


Z 7 Z 


H H D 


Plain text; I N 


T E 


3 0 


3 T 


E 3 


In the set-up of the 


third elements the 


3 generatrix 


Is ccm- 


posed entirely of high-frequency letters, but they do not 


eombine 


well with the plain text 
blned with the other two 


found thus 
gives : 


for. This generatrix 


when coa- 


1 


2 


3 


4 


3 


12 3 


12 3 


12 3 


12 3 


12 3 


W M 2 


S Z 7 


Z 4 4 


Z 7 Z 


H H D 


INI 


T E 3 


3 0 N 


3 T Y 


E 3 F 


The correct generatrix is 


the 3 generatrix. 


It gives the 


following: 


1 


2 


3 


4 


5 


12 3 


12 3 


12 3 


12 3 


12 3 


W M 2 


S Z 7 


Z 4 4 


Z 7 7. 


H H D 


IBU 


T E 3 


3 OF 


3TH 


E 3 N 



In all subsequent cycles the correction for the difference In 
phase Is the period Indicated by the generatrices determined above, 
viz, Y T S. In other words c^, ; Y; c 2 T; Cj i S, 

-For example, in Washington 68 the steps without going through 



the explanation above 

Hoboken 32 
Cycle -621 Exp. 

Upper key loci 
Lower key loci 
Imp. upper key 
Imp. lower key 
Cipher N T 4 

Washington 13 
Cycle -624 Bxp. 

Upper key loci 
Lower key loci 
Imp. upper key 
Imp . lower key 
Cipher 

Washington 68 
Cycle -638 Conf. 

Upper key loci 
Lower key loci 
Imp . upper key 
Imp. lower key 
Cipher 
Base 



give the base shown below 



002 






012 


623 






633 


X Y Z 


X Y T 


0 J X 


J 7 N 


P F K 


A 6 5 


0 K Q 


COE 


S J 0 V 


V C K 


7 3 R 


S 0 F 


002 






012 


626 






636 


X Y Z 


X Y T 


0 J X 


J 7 N 


A 6 5 


0 K Q 


COE 


OB 


V C C 


S G U 


P W M 


U D Y 


002 






012 


001 






Oil 


X Y Z 


X Y T 


0 J X 


J 7 N 


Z A H 


W Q Vi 


A Q S 




L M X 


T 7 E 


Y H 0 


5 U 4 


V R 0 


V 2 F 


C 4 H 


I 



019 022 
001 004 



M 6 


6 P D 


A R S 


C T 


D B 


K T Z 


A H W 


Q M 


Y 2 


H I 0 


7 V P 


B N 


1 

016 


025 


> 


001 


007 


M 6 


6 P D 


A R S 


C T 


T Z 


A H W 


Q M A 


Q Z 


N R 


0 2 G 


H P I 


B E 






022 


i 






021 


M 6 


6 PD 


A R Sj 


C T 


4 F 


2 6 Y| 


Z D t| 


R 



» 
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Assuming for the beginnings of Hoboken 32 and Washington 15 the 
same addresses as before, viz, SURGEON3GENERAL6N52WA555SHINGTON 
and DEPARTMENT3AIR3SERVICE, respectively, ve apply the proper 'cor- 
rections to the base derived above. 

Since the first period of the lover key of Washington 68 is 
affected by the assumed plain text for the 2nd, 5rd, 4th, 5th, and 
6th periods of Hoboken 52, and also by that for the 1st, 2nd, 5rd, 
4th, and 5th periods of Washington 15 > ve must be guided accordingly 
in making the corrections for imperfect key3. Again, since the 
first element of the 1st period of Washington 68 is the third 
element of the 5th period of Washington 15 > then the relative order 
of the elements of the periods of Washington 68 is 5-1-2, as com- 
pared with their order, 1-2-5, in Washington 15 and Hoboken 52, 
the experimental cycles. The order of the elements of the upper key 
is the same for all cycles. The corrections for the first three 
periods of Washington 68 take the folloving form: 

Correction for assumed plain text for Hoboken 52, SURGEON/^!? 
GENERAL6N52WA555SHINGT0N = 7 

For Upper Key 
Period 

1 2 5 

Ho correc- 1-2-5 1-2-5 

tion neces- 5 G E HER 

sary 3 G E~£ 5 G E 

rihr 



For Lover Kej 



2 

5 - 1-2 
. 5 G 
.5 G 



3 

5 - 1-2 
E N E 
. 3 G 

ri~6 



4 

5 - 1-2 
R A L 



Period 

5 

3 - 1-2 
6 H 5 S 



6 

3 - 1-2 
2 W A 



E 4 6 

T~TT) •» j j d 



7 

3-1-2 

5 5 5 



nrr -> t u p 

ITS Y ** L H Y 
F J R 



8 

3 - 1-2 

SHI 



F J R 

4TW 



Base 

Correction for im-J 
perfect upper keyj 
Correction for im-j 
perfect lover keyj 
First resultant 



1 

V R 


0 


Period 

2 

V 2 F 


C 


3 

4 H 


- - 


- 


3 G E 


4 


6 J 


L H 


y 


F J R 


4 


5 M 


N V 


F 


Q W I 


C 


N W 
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Correction for assumed plain text for Washington 13, //^DEPART 

ATR^SRRVTfTR - * 



MEHT3AIR3SERVICE - 



Period 



No correc- 
tion neces- 
sary 



2 3 
1-2-3 1-2-3 

D E P ART 
D T7 -)DE P 

m 



For Lower Ke: 



1 

3 - 1-2 
. D E 



Period 

2 3^5 

3 - 1-2 3 - 1-2 3 - 1-2 3 - 1-2 3 

PAR THE N T 3 AIR 3 

-e * D B 

FTJT-* P R J 

m r-> i p r 

r i c 

d 



6 

3 - 1-2 
3 S E 



p 7 3 
F S S 



7 

3 - 1-2 
R V I 



8 

3 - 1-2 
C E 3 



-»F S S 

0 b A 4U 6 A 

inrtf 



Pirst resultant 
Correction for im- 
perfect upper key 
Correction for im- 
perfect lower key 
Second resultant 





Period 




1 


2 


3 


N V P 


Q W I 


CUV 


... 


D E P 


R J I 


P s s 


0 6 A 


D G D 


E 6 4 


B D W 


P X L 



We are ready now to apply the correction for the difference in 
phase. We have found that c^« Yj c 2 = T; and c-^sS. Since in this 
case the third element of a period of the experimental cycle becomes 
the first element of that of the confirmative cycle, then the cor- 
rection to be applied becomes S Y T to correspond with the order 
3-1-2 of the letters of the confirmative cycle periods. 



Second resultant 
Correction for phased 
difference < 

Plain text 



Washington 68 



1st Period 2nd Period 3rd Period 

— rn ttht - fTt — 



S Y T 
3 C 0 



S Y T 
M M A 



S Y T 
4 4 2 



It is desirable, of course, to construct perfect monophase keys, 
in order to eliminate the corrections for differences in phase in 
subsequent work. The method is as follows: 

Take the first three letters upon which the reconstruction of 
the Imperfect keys was based. In this case they are X Y Z, 
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n 






Take any pair of equivalents for Y f the first letter of the 
corrective period, such as XI L. Place these two equivalents 
beneath X Y Z and find the resultant. Thus: 

Basic letters X Y Z 

Equivalents of Y U L 

Resultant 0 U 

Take the resultant of L (the second member of the pair of 
equivalents of Y) and T (the second letter of the corrective period), 
which is 2; add this letter to Z, the third basic letter. Thus: 

X Y Z 

U L 2 

m 



These three letters used as a base in connection with the 
correct plain text for the two experimental cycles will give two 
perfect monophase keys such as will apply to any cycles produced 
through their interaction, without the intervention of a correction 
for phase differences. The steps diagrammatically for the conver- 
sion of polyphase keys to monophase are as follows: 

Corrective period Y T S 

Base for polyphase keys U L 2 

Base for monophase keys X Y Z 

G~TT¥ 



Beginning with these letters as a base for the construction 
of perfect keys from the two experimental cycles we have the fol- 
lowing: 



Hoboken 32 N T 
'13 D 



Washington 13 



4 

R 



002 

623 

GUWQMSXDL 

TUEF4JZNL 

SJ0VVCK73RSOFEY2HIO7VPBN 

GE0N3GENERAL6N52WA555SHI 

002 
62 6 

GUWQMSXDL 

/'F4JZNLQ62 

fJV CCSGUPWMUDY2NR02GHPIBE 
II D E P A R T M E R T ) A I E 3 S E fi V I C E ) 



Comparison of these keys with those given on pages , shows 
that they are identical with the monophase keys and will therefore 
apply to any message enciphered by their means. 1 



I was unable to find, in my manuscript, where these monophase 
keys had been reconstructed. Evidently some page or pages must 
be missing and we will have to take it for granted that the 
statement made is correct. — W.F.F. (’48) 
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R^SUM^ 



In the original brochure the basic principles for the analysis 
of this cipher were set forth. The analysis was based upon a careful 
study of the method of encipherment in which two key tapes differing 
in length by but one letter were used. In this method sequent 
revolutions of the key tapes produce what we have termed sequent 
cycles, the analysis of any three or which is sufficient for a com- 
plete solution to be achieved. It was also shown, first, how the 
slightest carelessness in the operation of the machine would produce 
messages enciphered by means of the same single key letters, and 
second, how such messages, termed overlaps, are particularly easy 
to solve. 

In Addendum 1 it was shown how the same principles of solution 
apply to the system when the two key tapes differ in length by more 
than one letter. The dangers of using two keys whose lengths pos- 
sess a factor in common were also demonstrated therein. 

In Addendum 2 the correctness of the principles set forth, and 
the truth of the statements and claims made were demonstrated by 
the actual solution of the series of test messages submitted. The 
method of determining the lengths of the key tapes was elucidated. 

The mathematical relations existing between various lengths of key 
tapes and the resultant cycles were demonstrated, and the untrust- 
worthiness of the adopted method of allotment of the key tapes 
indicated. The various types of solution were given, and their 
feasibility discussed. It was then shown how solution was no longer 
dependent upon the finding of three sequent cycles , a discovery 
which completed the demonstration of the vulnerability of the 
system. f 



William F. Friedman 



REF ID : A5 1 6 91 3 









ADDENDUM 3o 

Qo* of the prerequisites to the solution of this cipher being the know- 
ledge of the key indicators for the various n»s sagas, there was submitted for 
ota* consideration a method of encoding and enciphering the indicators. 

The result of investigation shows that (l) the method as submitted does not, 
to an appreciable degree, add to the safety of the system; (2) the possession of 
the code book is not essential to solution. 

A list of encoded and enciphered key indicators for 80 messages was drawn 
up by one sat of operators and submitted to another. Within ten minutes after 
certain tables had been made, the exact length of the two keys were determined; 
and within three hours the key indicators in the form of numbers for any message 
could be read at will. This list follows: 



Message 


length 


Indicators 


§ 


Message 


Length 


Indicators 


1 


278 


2DH - EJJ 




41 


392 


AGJ - CAG 


2 


690 


JEE — AID 




42 


156 


EEC - BGF 


3 


81 


FGC - IS J 




43 


721 


FGI - GAD 


4 


201 


AFF - CBC 




44 


890 


JHI - IFC 


5 


949 


JCG - EEF 




45 


312 


EAA - CFC 


6 


152 


HDH - IDE 




46 


260 


DBE - HBJ 


7 


275 


JDJ - A JH 




47 


89 


CHH - JAB 


8 


501 


JDG - A3J 




48 


121 


AAE - DGC 


9 


370 


GEJ - D3F 




49 


363 


FJA - HHC 


10 


1108 


FHE - JID 




50 


405 


DJF - DEI 


U 


473 


CIG - EAB 




51 


560 


AIA - BDD 


12 


191 


CU - EEJ 




52 


703 


GX - J JC 


13 


302 


JEI - CII 




53 


1X9 


DDJ - BHA 


34 


297 


FAD - CSH 




54 


804 


AAJ - BDJ 


15 


451 


CU - GIH 




55 


462 


BIA - GIA 


16 


902 


CFF - BCJ 




56 


791 


PIC - HEC 


17 


79 


JCE — IUJ 




57 


920 


GGJ — IGD 


18 


210 


ODE - JFJ 




58 


201 


XI - CJG 


19 


506 


COG - BFC 




59 


527 


DCE - FDC 


2D 


787 


DCS - OGA 




60 


386 


EJF — ■ FFC 


21 


380 


EJJ - DAJ 




60. 


747 


FCE - IIA 


22 


170 


GEB - DJE 




62 


920 


CIH - GFA 


23 


542 


DID - GHF 




63 


1780 


JHB - JJJ 


2k 


1083 


CEI - GFA 




6k 


309 


DHA - HJH 


25 


367 


CEB - GHJ 




65 


187 


HHH - GFC 


26 


392 


GJE - HDI 




66 


99 


EFB - DHF 


27 


468 


JQH - IGI 




67 


209 


ADG - BIG 


28 


554 


DHC - EGH 




68 


867 


FED - JBE 


29 


920 


FFC - IHF 




69 


729 


EFI - GGJ 


30 


387 


FEE - DBG 




70 


372 


GDC - EJF 


33. 


542 


HJH - GBB 




71 


221 


FDF - HAF 


32 


659 


CJB *” DFF 




72 


183 


FCD - CAG 


33 


365 


FDA - KHE 




73 


349 


JEE — BDB 


3k 


1162 


BBH - AIC 




74 


540 


IAA - JAD 


35 


293 


AED - GED 




75 


274 


JED — AEA 


36 


180 


BAA - EBE 




76 . 


963 


JEI - LAJ 


37 


297 


ACB - JCF 




77 


582 


JX - BAE 


38 


326 


BEA - CDI 




78 


91 


JHH - GJC 


39 


860 


BJH - JU 




79 


355 


HAG - ACE 


40 


471 


XI - (EG 




80 


79 


CFD -■ JIA 



1 
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Tte motbbd of analyzing the enaoded and enciphered indicators was as follows: 

The system of encoding and enciphering the indicators is such that any key 
indicator itiich is repeated will hare the same final fora. For example, suppose 
one message has the key indicators 050 * 231, The plain code group for 050 is GJJ. 
Mow, inasmuch as only 3 enciphering alphabets are used, one for each letter of the 
three oode letters, whatever be the cipher equivalents for 0^ , , and both 

ass sages will show as the long key indicator the same combinations of letters, 
for example, using the tables given in the cods book, FEC. 

What has been said as regards the long key indicators applies likewise to 
the short key indicators. 

Two sets of tables were therefore drawn up in the form of indexes of the 
letter indicators, one set applying to the long key indicators, the other set, 
to the short key indicators. 

*****»#*****-#»» 



Now note that in a series of only 80 zass sages there are several instances 
in itiich the letter Indicators are identical as regards both the long key and the 
short key indexes. For example, the long key indicator for messages 12 and 15 
are identical, CU. 

Now there is only one circumstance under which two messages in the same 
series, that is, from the same station, can have the same long or the same short 
key indicator, and that is whan the nunfcer of letters intervening between the two 
messages is equal to or is an exact multiple of the length of the long key or tip 
short key respectively. 

Refer to the series of test messages submitted and note the key indicators 
for Washington 42 and Washington 53» They are 02D * 160 and E20 * 261 respectively. 
Row the total number of letters from the beginning of Washington 42 to the begin- 
ning of Washington 53 is as fallows: 



WASHINGTON 42-275 

43 - 374 

44 - 206 

45 - 378 

46 - 421 

47 - 319 

48 - 359 

49 - 400 

50 - 326 
51-582 



52 - 273 
Total — 3913 



2 
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How there are eleven messages from '’feshlngton 42 to Vkshingtcn 53 » Since tbs 
slip is consistently 2, we must add 11 x 2 or 22 letters to the total* This gives 
3935 as the grand total* The factors of this nunfcer are 5 x 787. The length of 
the long key is clearly 787* The correctness of this number can be corroborated 
from several more instances. 3h the sans manner, taking the distance between 
messages 12 and 15 in this series we ha/e the following: 

Message 12 - 191 

13 - 312 

14 - 297 

Total - - 



Mow it is clear that the length of the long key is at least 800 letters.- We 
have yet to take into account the slip between messages. If we assume the slip 
to be 1, then the length of the long key would be 803; if 2, it would be 806; if 
it would be 809, if 4, it would be 832, etc. Let us refer to another repetition 
lis., that between messages 42 and 81, indicator SBC. The total number of letters 
intervening is as follows: 



Message 


51 - 560 


61 - 747 


71 - 221 


42-156 


52 - 703 


62 - 920 


72 - 183 


43- 721 


53 -1009 


63 -1780 


73 - 149 


44- 890 


54 - 804 


64 - 309 


74 - 540 


45 - 312 


55 - 462 


65 - 187 


75 ■ 


- 274 


46 - 260 


56 - 791 


66 — 99 


76 - 963 


47-89 


57 - 920 


67 - 2D9 


77 - 582 


48 — 121 


58 - 203. 


68 - 867 


78 - 91 


49 - 363 


59 - 529 


69 - 725 


79 - 


* 355 


50 - 405 


60 - 386 


70 - 372 


80 - 79 






Total 


- - 19332 



Total no. of message » 39. 

Since the long key is at least 800 letters in length, the number of 
revolutions it has made between messages 42 and 81 is 24 (19332 - SCO). Trial of 
a slip of 1, 2,3,4 letters is then made. If the slip be 1, then we must add 39 x 1 
to 19332 and see if the total is exactly divisible by 803* If the slip be 2, then 
we mast add 39 x 2, or 78 to 19332 and see if the total is exactly divisible by 806, 
etc. When we try a slip cf 4, and add 39 x 4 “ 156 to 19332 ws have 19488. A 3lip 
of 4 would mean a key of 812 letters and calculation shows that 812 is the 24th 
multiple of 1%88, and indicates 24 complete revolutions between messages 42 and 81. 
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The length of the abort key was ascertained by exactly the same principles. 



except that the amount to 


be added for slip was not knom 


key waa foiaid to be 693» 


Thus, messages 41 and 72 showed 


kegr indicators. 


GAG. The 


calculations are 


as follows: 


Message 


a - 392 


51 - 560 


a - 747 




42 - 156 


52 - 703 


62 - 920 




43 - 721 


53 -1009 


63 -1780 




44 - 890 


54- 805 


64 - 309 




45 - 312 


55 -462 


65 - 187 




46 - 260 


56 - 791 


66-99 




47-69 


57 - 930 


67 - 209 




46-121 


58 - 201 


68 - 867 




49 - 363 


59 - 529 


69 - 725 




50 - 405 


60 - 386 


70 - 372 








71 - 221 






Total - 


- 1650S~ 


Total no# of messages 31. 


Slip - - 


* - 124 

ra3“ 



1663S 7 24 s 693 jr length of short key# 

As far as the solution of the messages la concerned we need have nothing 
more to do with the encoded and enciphered indicators, far we can proceed to find 



the SncUoatora for the series of messages, assuming as the beginning point 
pair of indicators we pleas© . because solution is based upon the relative 



of cycles, not their absolute number a For example, tho cycle number of any two 
cycles may be 72 and 75, or 133 and 136, or 2 and 5* the distance between the 
two cycles is the same, via,, 3« Mother way of pointing out the relativity of 
the calculations is this: the two key tapes are continuous endless chains# It 



is therefore of no importance whether we call a given locus on one of the tapes 
001 or 201, so long as we are consistent throughout in designating the other loci# 
Thus, the locus immediately fallowing 001 would be called 002# If we designate 
locus 001 as 201, then the next one is 202, etc# Vfe may start in therefore, to 
find the relative key indicators for our series of messages by basing the cal- 
culations upon the indicators 001 * 101 for message 1# These calculations are 
as follows: 

- 4 - 
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Solution nay now be achieved by exactly the same principles as those given 
in the preceding brochures. It is apparent , therefore, from a consideration of the 
preceding paragraphs that the possession of the code book is nob essential to 
solution. 

However, if we desire we can determine the absolute key indicators. The method 
is simple and is as follows: 

From the relative calculations above, tables are made of the long key indica- 
tors and the short key Indicators similar to those made at the beginning of the 
problem, with the letter indicators. This index is as fallows: 

******** 

Hs look in these tables for an unbroken sequence of indicators in which the 
intervals between suce salve key indicator numbers are small. In the index for the 
short toy indicators we have a sequence 466... 491, 492.. .506, applying to messages 
9, 15 >55, 36. Let us set dovn the short key letter indicators for these messages, 
and their relative positions. Thus : 

Message 9 - DBF - 488 

******* 

15 - GIH - 491 

55 - jgA - 492 
* «**'*« * 

36 - EBE - 506 

The only repetitions of letters in the letter indicators are the pair of 
letters G, and I. This means that In the cods list of equivalents for indicator 
mmfeare there are two sequent numbers the first two letters of whose cods 
equivalents are the same. There are many such cases in the code book, so we 
must find some farther points of eontact to enable us to pick out the correct pair. 
For example, we find that the short key indicator for message 11 is EAE, value 588. 
Let us add this to the table. Urns: 

Message 9 - EEF - 488 

******* 

15 “ GIH - 491 

55 - G|a - 492 

******* 

36 - EBE - 506 

* * *"*" H- * •fi- 
ll — EAE — 588 

- 5 - 
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Tfe have now tvo more points of contact. The absolute equivalents of the 
relative positions 506 and 538 must agree in the first and third letters, and they 
must be 82 Intervals apart, since 538 - 506 — 82. 

Search is made throughout the code book to find all the cases. Examine the 



following: 



Sue. Code Relative position Plain Code 



Absolute Position 






Message 9 CEP 483 CTJ 388 

35 GXH 491 AGD 391 

55 OlA 492 AGB 392 

36 506 GDH 406 

11 Sffi 588 CBH 488 

The agreement is gaod. rafering to other numbers as given by the index, 

if the letters of the encoded and enciphered indicators fit in with the set already- 

drawn up, we may assume that we have struck the correct absolute positions of the 

112 2 

indicators. For example, if, according to the shove C p = E c ; F p sE c , and 
Jp * F^, then in message $, short key indicator EEF s CTJ plain code as 574 



absolute position. The interval between 438 and 574, absolute, nust be the same 
as that between the relative equivalents . lie find that 488 absolute = 588 relative 
and that the short key indicator for message 5 as calculated relatively is 674o 
The proof Is complete. 

Once a short section like the above is determined, the rest follows very 

easily. 



- 6 - 
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lb illustrate how careful the officer in charge must be, note the relative 

positions of tho key tapes at the end of message 2, viz., 648—623. His next 

message contains approximately 70 words, he notes, and he figures that 350 letters 

will be enciphered, or, including functions, approximately 400 characters will be 

necessary for the message. He then finds that the addition of 400 characters to 

the point where message 2 left off will throw him "out of bounds." Thus: 

648 - 623 (a) 

400 - 400 (c) 

1043 - 1023 

700 - 670 

J?3 Difference equals - 5. 

In other words, he will be encroaching upon a region reserved for Station 4. 
He must therefore shift his key tapes back a long distance, and he moves them into 
the position 418 - 362, or a difference of 56, and then proceeds to encipher, ffe 

has had to do this several tines during the course of the day, and the greater the 

difference in length between the key tapes, the more often will such shifting back 
be necessary. 

How note that in this series of only 17 messages we have five sequent cycles. 

Using message 2 as a base, because it shows the greatest difference in the series 

of 5 messages In the sequent cycles, the arrangement is as fellows: 

Cycle 1 - Message 2 Key Indicators 442 - 417, Difference 25 
Cycle 2 - Message 12 Key Indicators 260 - 236, Difference 24 

Cycle 3 “ Message 17 Kay Indicators 225 202, Difference 23 

Cycle 4 - Message 4 Key Indicators 0S0 ~ 068, Difference 22 

Cycle 5 ** Message 1 Kay Indicators 0?6 - 055, Difference 21 

These messages have been arranged graphically in Fig. 19, and are now 
ready to be attacked in the manner described before, using the beginnings and 
taking advantage of the fact that encipherment begins with name and address. The 
fact that messages carry in plain text the place from which the message emanates, 
limits the number of possibilities for assumption of a signature, granting that 
the enemy has a good intelligence system and a close liaison exists between the 
cipher office and the intelligence bureau. Unless all messages passing over the 
lino are enciphered, addresses and signatures in plain text in ordinary massages 
would form a valuable body of information for the basis of assumptions of plain 
text. 



- 7 - 
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' Cncm a start is made toward decipherment, the rest follovs quickly be- 
causa the key indicators for other messages will enable the decipherer to shift 
the hays already partially reconstructed into other positions aid by building up 
sections of the key tapes the sections can be united in the proper manner and 
thus the oo opiate keys result. For example, note the to ay indicators for message 
3. vie., 416 - 362. Or anting that we have reconstructed the longer key from 413 to 
s«y 450 , and the shorter key from 362 to say 395, in one of these five cycles, it 
is only necessary to bring together the se series of longer and shorter toy 
letters from 418 to 450 on the one, and from 362 to 395 on the other to produce 
the decipherment of the beginning of message 3. By continuing such procedure, 
the entire keys may be pieced together and completely reconstructed. 

It should be noted that an excessive difference in length between the two 
key tapes is likely to cause great difficulties, for the greater this difference 
the sooner does one station become "out of bounds,” for the range of the key 
taps* becomes more limited as the difference between them increases. For example, 
we have given two tapes, 700 and 600 letters, a difference of 100 letters. The 
displacement is therefore 100 letters per revolution of the longer tape. This 
means that after only seven revolutions of the longer tape one has returned to 
the starting point, and further encipher cent without resetting the tapes would mean 
an overlap. Compare this with the case where the tapes differ by only one letter, 
for example, tapes of 700 and 699 letters. Here, only after the longer tape has 
made 700 revolutions does one get back to the starting point. In other words, one 
cm encipher TOO x 699 or 489, 300 letters before an overlap would be produced. 

***** 

It la clear, therefore, that the modified method of using the machine affords 
no better protection against decipherment than the original met? od, and it is also 
patent that the principles fbr the solution of this cipher as first laid down 
according to our original understanding of the method of using the machine apply 
with equal validity to the modified method as submitted. 

***** 

It may be thought that the occurrence of sequent cycles can be avoided by 
strict supervision. There are some things to be said on that point. 



-fitttff 
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Supervision could undoubtedly be exercised in each of the offices 
involved in a quad, but it would of necessity have to be supervision of the 
most carefhl nature by officers specially qualified. Granting this, there 
might be two methods of eliminating the possibility of the occurrence of se- 
quent cycles. Che would be to have an absolutely random choice of key indie a- 
gore (within the limits of the region assigned for the station) but with the 
restriction that no two messages are to be in sequent cycles. The other method 
would be to devise so no system whereby 2, 3 or more cycles are skipped regularly 
in all traffic. 

Aft«* considering these alternatives, we may say that the solution of 
cases in ihich one or two intervening cycles are missing can be achieved with 
no great difficulty. The solution of cases in which say five intervening cycles 
are missing auy be more difficult to achieve, but the necessity of skipping ary 
number of cycles above five in the case of random choice of indicators, and say 
five regularly in a systematic choice of indicators is so involved with practical 
difficulties that the entire system would be waak. For, if at least five cycles 
mist intervene, and if a station be allotted 200 cycles for its day's traffic, 
then the greatest nunber of cycles actually available would be 40, or in the 
ease of a longer tape of 700 letters in length, a limit of 28^000 letters would 
be imposed upon the day's activity for that station. In the case of a station 
that oust transact a large volume of business every day this would never be suf- 
ficient and the tapes would teve to be increased very greatly in length. All of 
this is aside from the danger of a misunderstanding of the rules and of careless- 
ness in operation. 

Furthermore, in the case of a single very long message, unless the message 
be broken 19 into parts, the encipherment of such a message is bound to extend 
into two or more sequent cycles. Of course, without a knowledge of the lengths 
of the tapes this would afford no clues to the decipherer. But the decipherer 
can tell approximately the lengths of the tapes by studying the indicators for no 
messages pass beyond 695 for the longer tape and 690 for the shorter, he can 
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mSCvf il 



sm~ 




REF ID : A5 1 6 91 3 



v» ^ 

feel reasonably certain tliat the tapes are in the neighborhood of 700 letters 
In length* It would take considerable experimentation to determine their exact 
lengthy but It could be done within a practicable length of time by a corps of 
decipherers If the results to be expected would warrant the expenditure of the 



tine and labor* 



*■*•**•** 



August 19, 1919* 





